What’s Vulnerable › Vulnerabilities

CVE-2024-0654: DeepFaceLab Util.py deserialization

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-01-18 · updated 2026-06-17
• Weakness: CWE-502

Description

A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Affected is an unknown function of the file mainscripts/Util.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-251382 is the identifier assigned to this vulnerability.

Affected products

• DeepFaceLab: df.wf.288res.384.92.72.22

References

• https://github.com/bayuncao/vul-cve-4
• https://github.com/bayuncao/vul-cve-4/blob/main/picture/1071705290840_.pic_hd.jpg
• https://vuldb.com/?ctiid.251382
• https://vuldb.com/?id.251382
• https://github.com/bayuncao/vul-cve-4
• https://github.com/bayuncao/vul-cve-4/blob/main/picture/1071705290840_.pic_hd.jpg
• https://vuldb.com/?ctiid.251382
• https://vuldb.com/?id.251382

Get alerted when CVE-2024-0654 or the next vulnerability affects your stack