CVE-2024-1432CWE-502

DeepFaceLab main.py apply_xseg deserialization

Medium · published February 11, 2024

CVSS v3.1
5.0
EPSS
1%
Percentile
50.3
In the wild
Unconfirmed
What it is

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22 and classified as problematic. This issue affects the function apply_xseg of the file main.py. The manipulation leads to deserialization. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-253391. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00646 · 50.3th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2024-02-11T03:00Z
EPSS history
Timeline
  • 11 FEB 03:00Z
    DeepFaceLab main.py apply_xseg deserialization
    cvelistv5