Back to Database
Status published
Unknown
CVE-2024-50050
Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a...
Vulnerability Description
Llama Stack prior to revision 7a8aa775e5a267cf8660d83140011a0b7f91e005 used pickle as a serialization format for socket communication, potentially allowing for remote code execution. Socket communication has been changed to use JSON instead.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-50050
Credits & Attribution
No credits recorded in the NVD database.
More from Meta Platforms, Inc
View All →CVE-2025-55178
Llama Stack prior to version v0.2.20 accepted unverified parameters in...
Unknown
0
CVE-2025-54952
An integer overflow vulnerability in the loading of ExecuTorch models...
Unknown
0
CVE-2025-54951
A group of related buffer overflow vulnerabilities in the loading...
Unknown
0
CVE-2025-54950
An out-of-bounds access vulnerability in the loading of ExecuTorch models...
Unknown
0
CVE-2025-54949
A heap buffer overflow vulnerability in the loading of ExecuTorch...
Unknown
0
Affected Vendor
Meta Platforms, Inc
View all reports →Affected Software
Llama Stack
Vulnerable Versions:
0
Timeline
Official Publish:
October 23rd, 2024
Last Modified:
October 24th, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.