Threats tagged 'ghsa-98hf-f439-379p'

A security vulnerability exists in DAMO Academy VideoLLaMA2 versions up to 1.1 in the load_pretrained_model function. The issue involves improper validation of an integrity check value due to manipulation of the _name_or_path argument. Remote exploitation is possible, and public exploit details have been disclosed. The project has been informed but has not yet responded or issued a fix.