CVE-2025-13711 Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent TFace eval Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a...

CVE-2025-13711

CVE-2025-13711 affects Tencent TFace, specifically the eval endpoint. The root cause is improper validation that enables deserialization of untrusted data, leading to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file); successful ...

CVE-2025-13706

This CVE concerns Tencent PatrickStar’s merge_checkpoint endpoint, where deserialization of untrusted data enables remote code execution. Impact: attacker can execute code with root privileges after user visits a crafted page/file. Root cause: insufficient validation of user-supplied data in the ...

CVE-2025-13706 Tencent PatrickStar merge_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent PatrickStar mergecheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent PatrickStar. User interaction is required to exploit this vulnerability in that the...

CVE-2025-13708

CVE-2025-13708 affects Tencent NeuralNLP-NeuralClassifier. The vulnerability is in the _load_checkpoint function, where unvalidated deserialization of untrusted data can lead to remote code execution. Exploitation requires user interaction (visiting a malicious page or opening a malicious file), ...

CVE-2025-13708 Tencent NeuralNLP-NeuralClassifier _load_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent NeuralNLP-NeuralClassifier loadcheckpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent NeuralNLP-NeuralClassifier. User interaction is required to exploit th...

CVE-2025-13716

CVE-2025-13716 affects Tencent MimicMotion; the vulnerability is in the create_pipeline function where unvalidated user-supplied data enables deserialization of untrusted data, leading to remote code execution with root privileges. Exploitation requires user interaction (visiting a malicious page...

CVE-2025-13714

Tencent MedicalNet generate_model suffers from a Deserialization of Untrusted Data vulnerability that allows code execution in the root context. The flaw stems from insufficient validation of user-supplied data in the deserialize path of generate_model, enabling an attacker to run arbitrary code ...

CVE-2025-13714 Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent MedicalNet generatemodel Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the targ...

CVE-2025-13714 Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent MedicalNet generatemodel Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the targ...

CVE-2025-13714 Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent MedicalNet generatemodel Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the targ...

CVE-2025-13710 Tencent HunyuanVideo load_vae Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent HunyuanVideo loadvae Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanVideo. User interaction is required to exploit this vulnerability in that the target...

CVE-2025-13710

CVE-2025-13710 affects Tencent HunyuanVideo and involves the load_vae function, where lack of validation allows deserialization of untrusted data and arbitrary code execution. The root cause is improper input validation in load_vae, enabling a remote code execution scenario with the attacker need...

CVE-2025-13707

CVE-2025-13707 affects Tencent HunyuanDiT, specifically the model_resume function. The vulnerability arises from insufficient validation of user-supplied data, allowing deserialization of untrusted data and leading to remote code execution with root privileges. Exploitation requires user interact...

CVE-2025-13712 Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-13712 Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent HunyuanDiT merge Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent HunyuanDiT. User interaction is required to exploit this vulnerability in that the target must...

CVE-2025-13712

CVE-2025-13712 affects Tencent HunyuanDiT via the merge endpoint, where deserialization of untrusted data can lead to Remote Code Execution with root privileges. The flaw arises from missing validation of user-supplied data. Public sources (ZDI-25-1028 and related records) confirm the vulnerabili...

CVE-2025-13713 Tencent Hunyuan3D-1 load_pretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability

Tencent Hunyuan3D-1 loadpretrained Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent Hunyuan3D-1. User interaction is required to exploit this vulnerability in that the...

CVE-2025-13713

CVE-2025-13713 affects Tencent Hunyuan3D-1, with a flaw in the load_pretrained function that allows deserialization of untrusted data due to insufficient validation. This leads to remote code execution in the context of root per the provided descriptions. Exploitation requires user interaction (t...

Tencent TFace 代码问题漏洞

Tencent TFace is a deep learning research platform focusing on face recognition from China's Tencent Tencent. Tencent TFace suffers from a code issue vulnerability that stems from a lack of validation of user-supplied data in eval endpoints, which could lead to deserialization of untrustworthy da...