Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-3677

lm-sys fastchat apply_delta.py apply_delta_low_cpu_mem deserialization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability classified as critical was found in lm-sys fastchat up to 0.2.36. This vulnerability affects the function split_files/apply_delta_low_cpu_mem of the file fastchat/model/apply_delta.py. The manipulation leads to deserialization. An attack has to be approached locally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

lm-sys fastchat

  • 0.2.0affected
  • 0.2.1affected
  • 0.2.2affected
  • 0.2.3affected
  • 0.2.4affected
  • 0.2.5affected
  • 0.2.6affected
  • 0.2.7affected
  • 0.2.8affected
  • 0.2.9affected
  • 0.2.10affected
  • 0.2.11affected
  • 0.2.12affected
  • 0.2.13affected
  • 0.2.14affected
  • 0.2.15affected
  • 0.2.16affected
  • 0.2.17affected
  • 0.2.18affected
  • 0.2.19affected
  • 0.2.20affected
  • 0.2.21affected
  • 0.2.22affected
  • 0.2.23affected
  • 0.2.24affected
  • 0.2.25affected
  • 0.2.26affected
  • 0.2.27affected
  • 0.2.28affected
  • 0.2.29affected
  • 0.2.30affected
  • 0.2.31affected
  • 0.2.32affected
  • 0.2.33affected
  • 0.2.34affected
  • 0.2.35affected
  • 0.2.36affected

References