Vulnerability details

CVE-2025-13709

Tencent TFace

Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability

CVSS 3.0

7.8High

Official description

Tencent TFace restore_checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tencent TFace. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the restore_checkpoint function. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-27185.

CVSS scores

Score	Version	Source	Vector
7.8High	3.0	CVEProject cvelistV5 (CNA) (zdi)	`CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
Tencent	TFace	Current	CVEProject cvelistV5 (CNA)

References and advisories

https://www.zerodayinitiative.com/advisories/ZDI-25-1036/ x_research-advisory
https://github.com/Tencent/TFace/commit/7b2eed297d43dcdd1e3d45bfdfc950478e3af5d9 vendor-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-12-24
Last updated: 2025-12-24
State: Published
Assigner (CNA): zdi

Exploit prediction (EPSS)

0.51%

Probability of exploitation in 30 days

43.9%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-502
Deserialization of Untrusted Data