← العودة للجدول
CVE-2025-43852
CVE-2025-43852 — Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VI
📅 2025-05-05
🔴 Critical 🔥 No NVD Exploit Vulnerability CVSS 9.8 🎯 EPSS 6.02%

📋 الوصف الكامل

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The model_choose variable takes user input (e.g. a path to a model) and passes it to the uvr function in vr.py. In uvr , if model_name contains the string "DeEcho", a new instance of AudioPreDeEcho class is created wit

💻 الأنظمة المتأثرة

Retrieval-based-Voice-Conversion-WebUI is a

⚠️ نوع التهديد

Exploit

🔗 CVE ID

CVE-2025-43852

📡 المصدر

NVD

✅ الحلول والتخفيف

Update to v2.2.231006

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ←