Vulnerability · Published May 15, 2025 · Assigned by VulDB
CVE-2025-4701VITA-MLLM Freeze-Omni utils.py torch.load deserialization
Medium 5.3
In plain English
A medium-severity unsafe deserialization in Freeze-Omni from VITA-MLLM. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Severity (CVSS 3.1)5.3Medium
Exploit odds (30 days)0.2%top 89.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local host.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| VITA-MLLM | Freeze-Omni | 20250421 |
Weakness: CWE-502, CWE-20 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-308999 | VITA-MLLM Freeze-Omni utils.py torch.load deserialization vdb-entry, technical-description
- VDB-308999 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #567796 | VITA-MLLM Freeze-Omni 0.0 Deserialization third-party-advisory
- https://github.com/VITA-MLLM/Freeze-Omni/issues/29 issue-tracking