CNNVD-202512-4077 Information
Dec 23, 2025
cve
CNNVD ID
CNNVD-202512-4077
Related CVE
- CNNVD Published: 2025-12-23
Description (Chinese)
Tencent FaceDetection-DSFD是中国腾讯（Tencent）公司的一个人脸检测算法。 Tencent FaceDetection-DSFD存在代码问题漏洞，该漏洞源于resnet端点缺乏对用户提供数据的验证，可能导致反序列化不可信数据和远程代码执行。
Description (English)
Tencent FaceDetetion-DSFD is a face test algorithm for Tencent. Tencent FaceDetection-DSFD has a code gap that stems from the lack of validation of data provided by users at the renet endpoint, which may lead to anti-sequencing untrustworthy data and remote code execution.
Hazard Level
Medium
Vulnerability Type
代码问题
Affected Vendor
腾讯
Published
2025-12-23
Last Modified
2026-02-24
References
https://github.com/Tencent/FaceDetection-DSFD/commit/a941d089d8ae2df5292a904e79d88649cb58a440 https://www.zerodayinitiative.com/advisories/ZDI-25-1183/
Patch
https://github.com/Tencent/FaceDetection-DSFD/commit/a941d089d8ae2df5292a904e79d88649cb58a440
Share on: