### [CVE-2024-0654](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-0654) ![](https://img.shields.io/static/v1?label=Product&message=DeepFaceLab&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=%3D%20pretrained%20DF.wf.288res.384.92.72.22%20&color=brighgreen) ![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-502%20Deserialization&color=brighgreen) ### Description A vulnerability, which was classified as problematic, was found in DeepFaceLab pretrained DF.wf.288res.384.92.72.22. Affected is an unknown function of the file mainscripts/Util.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. VDB-251382 is the identifier assigned to this vulnerability. ### POC #### Reference No PoCs from references. #### Github - https://github.com/fkie-cad/nvd-json-data-feeds