Submit #247367: DeepFaceLab DeepFaceLab pretrained DF.wf.288res.384.92.72.22 command executioninfo

TitleDeepFaceLab DeepFaceLab pretrained DF.wf.288res.384.92.72.22 command execution
DescriptionDeepfakes is a technology that uses deep learning in machine learning to achieve deep video face-changing. This technology can produce very realistic and natural face-changing videos on certain occasions. Among many software, DeepFaceLab is the easiest to install, the most convenient to use, and the fastest to update. Line 150 of DFLIMG/DFLJPG.py does not verify when loading external data, allowing attackers to construct malicious content and execute arbitrary commands.
Source⚠️ https://github.com/bayuncao/vul-cve-1
User
 bayuncao (UID 50143)
Submission12/05/2023 00:33 (3 years ago)
Moderation12/10/2023 08:08 (5 days later)
StatusAccepted
VulDB entry247364 [DeepFaceLab pretrained DF.wf.288res.384.92.72.22 DFLIMG/DFLJPG.py deserialization]
Points20

Want to know what is going to be exploited?

We predict KEV entries!