Approved changes feed: RSS · Atom

cpe:2.3:a:funaudiollm:inspiremusic:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFunaudiollm (959b0992-9bac-57e9-9361-8b1c8c24e0b5)
ProductInspiremusic (2fca18d9-50b7-5aa3-88e7-911b30d97285)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5148 vulnerable 2026-06-08 07:35:24.268504 FunAudioLLM InspireMusic Pickle Data model.py load_state_dict deserialization
MEDIUM (5.3)
A vulnerability was found in FunAudioLLM InspireMusic up to bf32364bcb0d136497ca69f9db622e9216b029dd. It has been classified as critical. Affected is the function load_state_dict of the file inspiremusic/cli/model.py of the component Pickle Data Handler. The manipulation leads to deserialization. An attack has to be approached locally. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The name of the patch is 784cbf8dde2cf1456ff808aeba23177e1810e7a9. It is recommended to apply a patch to fix this issue.
Published: 2025-05-25T12:00:10.198Z
Updated: 2025-05-28T17:38:41.538Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.