← العودة للجدول
CVE-2025-43846
CVE-2025-43846 — Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VI
📅 2025-05-05
🔴 Critical 🔥 No NVD Exploit Vulnerability CVSS 9.8 🎯 EPSS 6.02%

📋 الوصف الكامل

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_path1 variable takes user input (e.g. a path to a model) and passes it to the show_info function in process_ckpt.py, which uses it to load the model on that path with torch.load, which can lead to unsafe deserialization and

💻 الأنظمة المتأثرة

Retrieval-based-Voice-Conversion-WebUI is a

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2025-43846

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.2.231006

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←