- Description
- picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified. By flipping specific bits in the ZIP file headers, an attacker can embed malicious pickle files that remain undetected by PickleScan while still being successfully loaded by PyTorch's torch.load(). This can lead to arbitrary code execution when loading a compromised model.
- Source
- 103e4ec9-0a87-450b-af77-479448ddef11
- NVD status
- Analyzed
CVSS 4.0
- Type
- Secondary
- Base score
- 5.3
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- MEDIUM
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
- 103e4ec9-0a87-450b-af77-479448ddef11
- CWE-345
- nvd@nist.gov
- NVD-CWE-noinfo
- Hype score
- Not currently trending
🟠 PyTorch, Arbitrary Code Execution, #CVE-2025-1945 (Medium) https://t.co/a2WPPvVsGJ
@dailycve
19 Mar 2025
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-1945 Arbitrary Code Execution in PickleScan Before 0.0.23 via Malicious... https://t.co/sYDP7k5tMD Customizable Vulnerability Alerts: https://t.co/U7998fz7yk
@VulmonFeeds
10 Mar 2025
24 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-1945 picklescan before 0.0.23 fails to detect malicious pickle files inside PyTorch model archives when certain ZIP file flag bits are modified. By flipping specific bits in… https://t.co/2xCcCn4QXn
@CVEnew
10 Mar 2025
420 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mmaitre314:picklescan:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B21661AE-0228-49C7-A966-4FDA8DAF0C0B",
"versionEndExcluding": "0.0.23"
}
],
"operator": "OR"
}
]
}
]