Tencent/MedicalNet

Tencent/MedicalNet

Releases0

Stars2.21K

Many studies have shown that the performance on deep learning is significantly affected by volume of training data. The MedicalNet project provides a series of 3D-ResNet pre-trained models and relative code.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2025-13714 ↗	Dec 23, 2025Tuesday, 23 December 2025, 22:15	—	—
Tencent MedicalNet generate_model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent MedicalNet. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the generate_model function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27192.