CVE-2024-27322

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-27322
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-27322.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-27322
Downstream
Published
2024-04-29T13:15:30Z
Modified
2025-08-09T19:01:27Z
Summary
[none]
Details

Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with.

References

Affected packages