Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-4701

VITA-MLLM Freeze-Omni utils.py torch.load deserialization

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local host.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

VITA-MLLM Freeze-Omni

  • 20250421affected

References