| शीर्षक | FunAudioLLM InspireMusic 0.0 Deserialization |
|---|
| विवरण | InspireMusic is a unified framework for music, song, and audio generation by LLM. It uses the torch.load function to load data without specifying the weights_only=True parameter. This function is used to deserialize data, and when it loads untrusted data, it may lead to the execution of arbitrary code during the deserialization process. Since the source of the data loaded by torch.load is not verified, there is a risk that malicious model can be used to exploit this vulnerability.
More details: https://github.com/FunAudioLLM/InspireMusic/issues/53 |
|---|
| स्रोत | ⚠️ https://github.com/FunAudioLLM/InspireMusic/issues/53 |
|---|
| उपयोगकर्ता | ybdesire (UID 83239) |
|---|
| सबमिशन | 08/05/2025 04:07 PM (1 वर्ष पहले) |
|---|
| संयम | 24/05/2025 06:25 PM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 310236 [FunAudioLLM InspireMusic तक bf32364bcb0d136497ca69f9db622e9216b029dd Pickle Data model.py load_state_dict अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|