CVE-2025-5148

creationtimestamp| type| source ---|---|--- 2025-05-25 12:13:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpyn2glud7c2 2025-05-25 13:36:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpyrp47ytr2w...

CVE-2025-5148 FunAudioLLM InspireMusic Pickle Data model.py load_state_dict deserialization

A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function loadstatedict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. A...

CVE-2025-5148

FunAudioLLM InspireMusic (up to commit bf32364bcb0d136497ca69f9db622e9216b029dd) contains a deserialization vulnerability in the Pickle Data Handler. Specifically, the load_state_dict function in inspiremusic/cli/model.py is exploitable via crafted input, enabling local deserialization manipulati...