CVE-2025-43843

creationtimestamp| type| source ---|---|--- 2025-05-05 17:20:02+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14922 2025-05-05 20:03:31+00:00| seen| https://t.me/cvedetector/24457...

CVE-2025-43843

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7 and f0method8 take user input and pass it into the extractf0feature function, which concatenates them into a command th...

CVE-2025-43843 GHSL-2025-013_Retrieval-based-Voice-Conversion-WebUI

Retrieval-based-Voice-Conversion-WebUI is a voice changing framework based on VITS. Versions 2.2.231006 and prior are vulnerable to command injection. The variables expdir1, np7 and f0method8 take user input and pass it into the extractf0feature function, which concatenates them into a command th...

CVE-2025-43843

CVE-2025-43843 affects Retrieval-based-Voice-Conversion-WebUI (RVC-Project)