{"cve":"CVE-2025-1944","nvd":{"published":"2025-03-10T12:15:10.967","modified":"2026-06-17T08:40:23.900","status":"Modified","description":"picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract and scan PyTorch model archives. By modifying the filename in the ZIP header while keeping the original filename in the directory listing, an attacker can make PickleScan raise a BadZipFile error. However, PyTorch's more forgiving ZIP implementation still allows the model to be loaded, enabling malicious payloads to bypass detection.","cvss_v4":{"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L","score":5.3},"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","score":6.5},"cwes":["CWE-345"],"references":["https://github.com/mmaitre314/picklescan/commit/e58e45e0d9e091159c1554f9b04828bbb40b9781","https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7q5r-7gvp-wc82","https://www.sonatype.com/security-advisories/cve-2025-1944"],"products":["mmaitre314:picklescan"],"source":"nvd","synced_at":"2026-10-19T22:00:17.429720821+00:00"},"epss":{"cve":"CVE-2025-1944","score":0.0033,"percentile":0.26186,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-7q5r-7gvp-wc82","url":"https://osv.dev/vulnerability/GHSA-7q5r-7gvp-wc82","summary":"Zip Exploit Crashes Picklescan But Not PyTorch ","modified":"2025-04-09T20:37:37.871020Z","packages":[{"ecosystem":"PyPI","name":"picklescan","purl":"pkg:pypi/picklescan","ranges":["<0.0.23"],"fixed":["0.0.23"]}]},{"id":"PYSEC-2025-20","url":"https://osv.dev/vulnerability/PYSEC-2025-20","summary":"","modified":"2025-04-09T17:59:23.693678Z","packages":[{"ecosystem":"PyPI","name":"picklescan","purl":"pkg:pypi/picklescan","ranges":["<0.0.23"],"fixed":["0.0.23"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}