CVE-2024-37064
EUVD-2024-202004.06.2024, 12:15
Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded.Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| ydataai | ydata-profiling | 𝑥 ≤ 3.7.0 | ADP |
Common Weakness Enumeration