VITA-MLLM/Freeze-Omni

VITA-MLLM/Freeze-Omni

Releases0
Stars381
✨✨Freeze-Omni: A Smart and Low Latency Speech-to-speech Dialogue Model with Frozen LLM

CVE History

CVEPublishedCVSS v3CVSS v2
5.3 MEDIUM4.3 MEDIUM

A vulnerability, which was classified as problematic, has been found in VITA-MLLM Freeze-Omni up to 20250421. This issue affects the function torch.load of the file models/utils.py. The manipulation of the argument path leads to deserialization. It is possible to launch the attack on the local host.