Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-3165

thu-pacman chitu backend.py torch.load deserialization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability classified as critical has been found in thu-pacman chitu 0.1.0. This affects the function torch.load of the file chitu/chitu/backend.py. The manipulation of the argument ckpt_path/quant_ckpt_dir leads to deserialization. An attack has to be approached locally.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

thu-pacman chitu

  • 0.1.0affected

References