ZIP Archive Manipulation Vulnerability in PickleScan by Maitre314
CVE-2025-1944

5.3MEDIUM

Key Information:

Vendor

Mmaitre314

Status
Picklescan
Vendor
CVE Published:
10 March 2025

What is CVE-2025-1944?

PickleScan versions prior to 0.0.23 are susceptible to a ZIP archive manipulation flaw that leads to application crashes when processing certain PyTorch model files. An attacker can exploit this vulnerability by altering the ZIP header's filename while retaining the original name in the directory listing, which triggers a BadZipFile error in PickleScan. Despite this crash, PyTorch’s robust ZIP handling still permits loading of the model, facilitating the execution of malevolent payloads that can evade detection.

Affected Version(s)

picklescan 0.0.1 < 0.0.23

References

https://sites.google.com/sonatype.com/vulnerabilities/cve...
third-party-advisory
https://github.com/mmaitre314/picklescan/security/advisor...
vendor-advisory
https://github.com/mmaitre314/picklescan/commit/e58e45e0d...
patch

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trevor Madge (@madgetr) of Sonatype
.