| शीर्षक | VITA-MLLM Freeze-Omni 0.0 Deserialization |
|---|
| विवरण | Freeze-Omni, a speech-to-speech dialogue model, has a critical vulnerability (CWE-502: Deserialization of Untrusted Data). In the models/utils.py file, the torch.load function is used without the weights_only=True parameter when loading data from a file specified by the path parameter. If an attacker-crafted malicious pickle file is loaded, it can trigger arbitrary code execution during deserialization. This allows attackers to gain unauthorized system access or carry out malicious actions. All versions of Freeze-Omni are affected, and as of now, there's no fix on the latest main branch.
More details: https://github.com/VITA-MLLM/Freeze-Omni/issues/29 |
|---|
| स्रोत | ⚠️ https://github.com/VITA-MLLM/Freeze-Omni/issues/29 |
|---|
| उपयोगकर्ता | ybdesire (UID 83239) |
|---|
| सबमिशन | 30/04/2025 03:49 PM (1 वर्ष पहले) |
|---|
| संयम | 15/05/2025 08:31 AM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 308999 [VITA-MLLM Freeze-Omni तक 20250421 models/utils.py torch.load path अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|