large language and vision assistant vulnerabilities and fixes

Recent CVEs affecting large language and vision assistant, with upgrade or downgrade steps. 3 tracked.

Also searched as: largelanguageandvisionassistant.

large language and vision assistant has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-03-20. Highest priority: CVE-2024-12070 (score 51/100).

• CVE-2024-9311 MEDIUM 6.1 DOWNGRADE A Cross-Site Request Forgery (CSRF) vulnerability in haotian-liu/llava v1.2.0 (LLaVA-1.6) allows an attacker t
• CVE-2024-12070 HIGH 7.5 DOWNGRADE A Denial of Service (DoS) vulnerability exists in the file upload feature of haotian-liu/llava, specifically i
• CVE-2024-11449 HIGH 7.5 DOWNGRADE A vulnerability in haotian-liu/llava version 1.2.0 (LLaVA-1.6) allows for Server-Side Request Forgery (SSRF) t

FAQ

How do I fix large language and vision assistant vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is large language and vision assistant being exploited right now?

None of the tracked large language and vision assistant CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which large language and vision assistant CVE should I patch first?

CVE-2024-12070 currently ranks highest (51/100): A Denial of Service (DoS) vulnerability exists in the file upload feature of haotian-liu/llava, specifically i.

RSS feed for large language and vision assistant · ← Back to latest CVEs