cve/2024/CVE-2024-27322.md
2025-09-29 16:08:36 +00:00

962 B
Raw Blame History

CVE-2024-27322

Description

Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end users system when interacted with.

POC

Reference

No PoCs from references.

Github