CVE-2025-13713 | Tencent Hunyuan3D-1 load_pretrained deserialization (ZDI-25-1027)

A vulnerability, which was classified as critical, has been found in Tencent Hunyuan3D-1. Affected by this issue is the function load_pretrained. This manipulation causes deserialization.

This vulnerability is tracked as CVE-2025-13713. The attack is possible to be carried out remotely. No exploit exists.

To fix this issue, it is recommended to deploy a patch.