CVE-2024-10372

CVE-2024-10372 is a problematic insecure temporary file vulnerability found in chidiwilliams buzz version 1.1.0, specifically within the download_model function of the buzz/model_loader.py file. The attack vector is local, with high attack complexity and difficult exploitation, resulting in low impact to integrity and availability. While the exploit has been publicly disclosed, there is no evidence of active exploitation, readily available exploit tools like Metasploit or Nuclei, or significant community discussion or media coverage.