← العودة للجدول
CVE-2025-43851
CVE-2025-43851 — Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VI
📅 2025-05-05
🔴 Critical 🔥 No NVD Exploit Vulnerability CVSS 9.8 🎯 EPSS 6.02%

📋 الوصف الكامل

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , a new instance of AudioPre class is created with the model_path attribute containing the aformentioned user

💻 الأنظمة المتأثرة

Retrieval-based-Voice-Conversion-WebUI is a

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2025-43851

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.2.231006

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←