RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.2.231006 process_ckpt.py extract_small_model ckpt_path2 deserialization

Summaryinfo

A vulnerability categorized as very critical has been discovered in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.2.231006. The impacted element is the function extract_small_model of the file process_ckpt.py. Such manipulation of the argument ckpt_path2 leads to deserialization. This vulnerability is referenced as CVE-2025-43847. It is possible to launch the attack remotely. No exploit is available.

Detailsinfo

A vulnerability was found in RVC-Project Retrieval-based-Voice-Conversion-WebUI up to 2.2.231006 and classified as very critical. Affected by this issue is the function extract_small_model of the file process_ckpt.py. The manipulation of the argument ckpt_path2 with an unknown input leads to a deserialization vulnerability. Using CWE to declare the problem leads to CWE-502. The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to unsafe deserialization. The ckpt_path2 variable takes user input (e.g. a path to a model) and passes it to the extract_small_model function in process_ckpt.py, which uses it to load the model on that path with torch.load, which can lead to unsafe deserialization and remote code execution. As of time of publication, no known patches exist.

The advisory is available at securitylab.github.com. This vulnerability is handled as CVE-2025-43847 since 04/17/2025. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details are known, but there is no available exploit. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 08/01/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Project Management Software

Vendor

• RVC-Project

Name

• Retrieval-based-Voice-Conversion-WebUI

Version

• 2.2.231006

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion