CVE-2024-0654

Published: Jan 18, 2024Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Affected is an unknown function of the file mainscripts/Util.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-251382 is the identifier assigned to this vulnerability.

Affected (1)

Products: Iperov: Deepfacelab

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Iperov Deepfacelab	Version df.wf.288res.384.92.72.22

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (8)

https://github.com/bayuncao/vul-cve-4

Source: cna@vuldb.com

Broken Link

https://github.com/bayuncao/vul-cve-4/blob/main/picture/1071705290840_.pic_hd.jpg

Source: cna@vuldb.com

Broken Link

https://vuldb.com/?ctiid.251382

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.251382

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://github.com/bayuncao/vul-cve-4

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://github.com/bayuncao/vul-cve-4/blob/main/picture/1071705290840_.pic_hd.jpg

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://vuldb.com/?ctiid.251382

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.251382

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

Timeline

No history available yet.