PT-2024-18042 · Unknown · Deepfacelab

Bayuncao · Published 2024-02-10 · Updated 2025-12-30 · CVE-2024-1432

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DeepFaceLab pretrained DF.wf.288res.384.92.72.22

Description A vulnerability was found in DeepFaceLab pretrained and classified as problematic. This issue affects the function apply xseg of the file main.py. The manipulation leads to deserialization. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Offensive activities were identified targeting DeepFaceLab.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2024-1432

Affected Products

Deepfacelab

References · 11

• 🔥❌ https://github.com/bayuncao/vul-cve-12 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2024-1432 · Security Note
• https://osv.dev/vulnerability/CVE-2024-1432 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1756569339417841792 · Twitter Post
• https://vuldb.com/?ctiid.253391 · Note
• https://twitter.com/CVEnew/status/1756517296968007682 · Twitter Post
• https://twitter.com/Esparta6108713/status/1756524166034157921 · Twitter Post
• https://t.me/cveNotify/147134 · Telegram Post
• https://t.me/cvenotify/70969 · Telegram Post
• https://vuldb.com/?id.253391 · Note
• https://twitter.com/vuldb/status/1756804690728382466 · Twitter Post