Description (CNA)
An issue in Step-Video-T2V allows a remote attacker to execute arbitrary code via the /vae-api , /caption-api , feature = pickle.loads(request.get_data()) component
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/stepfun-ai/Step-Video-T2V/blob/main/api/call_remote_server.py
- https://github.com/stepfun-ai/Step-Video-T2V/issues/65
ADP enrichment
No English description supplied.
No references supplied.