ZIP Archive Manipulation Vulnerability in PickleScan by Maitre314
CVE-2025-1944

5.3MEDIUM

Key Information:

Vendor

Mmaitre314

Status
Picklescan
Vendor
CVE Published:
10 March 2025

What is CVE-2025-1944?

PickleScan versions prior to 0.0.23 are susceptible to a ZIP archive manipulation flaw that leads to application crashes when processing certain PyTorch model files. An attacker can exploit this vulnerability by altering the ZIP header's filename while retaining the original name in the directory listing, which triggers a BadZipFile error in PickleScan. Despite this crash, PyTorch’s robust ZIP handling still permits loading of the model, facilitating the execution of malevolent payloads that can evade detection.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

picklescan 0.0.1 < 0.0.23

References

https://www.sonatype.com/security-advisories/cve-2025-1944
third-party-advisory
https://github.com/mmaitre314/picklescan/security/advisor...
vendor-advisory
https://github.com/mmaitre314/picklescan/commit/e58e45e0d...
patch

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trevor Madge (@madgetr) of Sonatype
JSON
.