Back to overview

CVE-2025-71342

HIGH
8.1
CVSS 3.1
Description
picklescan before 0.0.30 fails to detect malicious pickle files using idlelib.run.Executive.runcode in reduce methods. Attackers can embed undetected code in pickle files that executes during pickle.load, enabling remote code execution in PyTorch models and supply chain attacks.

Metadata

CVE ID
CVE-2025-71342
State
PUBLISHED
Assigner
VulnCheck
Reserved
2026-06-20 12:48 UTC
Published
2026-07-04 01:23 UTC
Last updated
2026-07-04 01:23 UTC
Primary CWE
CWE-502
Deserialization of Untrusted Data
Vendor / Product
picklescan / picklescan
Sources
cve.org  ·  NVD

Severity & Metrics

8.1 HIGH CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products (1)
VendorProductPlatformVersions
picklescan picklescan — 0 < 0.0.30, 0.0.30
Weakness (CWE)
CWESourceDescription
CWE-502 cna Deserialization of Untrusted Data
CVSS scores (2)
ScoreSeverityVersionSourceVector
8.1 HIGH 3.1 cna CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
7.6 HIGH 4.0 cna CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
References (2)
Back to overview