← العودة للجدول
CVE-2025-43849
CVE-2025-43849 — Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VI
📅 2025-05-05
🔴 Critical 🔥 No NVD Exploit Vulnerability CVSS 9.8 🎯 EPSS 6.27%

📋 الوصف الكامل

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_a and cpkt_b variables take user input (e.g. a path to a model) and pass it to the merge function in process_ckpt.py, which uses them to load the models on those paths with torch.load, which can lead to unsafe deserializati

💻 الأنظمة المتأثرة

Retrieval-based-Voice-Conversion-WebUI is a

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2025-43849

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.2.231006

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←