CVE-2025-1944 Details
Description
picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to extract and scan PyTorch model archives. By modifying the filename in the ZIP header while keeping the original filename in the directory listing, an attacker can make PickleScan raise a BadZipFile error. However, PyTorch's more forgiving ZIP implementation still allows the model to be loaded, enabling malicious payloads to bypass detection.
A denial-of-service vulnerability has been identified in PickleScan versions prior to 0.0.23. The issue arises from a ZIP archive manipulation attack that causes PickleScan to crash while extracting and scanning PyTorch model archives. By altering the filename in the ZIP header and maintaining the original filename in the directory listing, an attacker can trigger a BadZipFile error in PickleScan. Although this error occurs, PyTorch's more lenient ZIP handling allows the model to be loaded, enabling malicious payloads to evade detection.
Users can upgrade to PickleScan version 0.0.23 or later, which addresses this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 10, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mmaitre314/picklescan/commit/e58e45e0d9e091159c1554f9b04828bbb40b9781 | Sonatype | Patch |
| https://github.com/mmaitre314/picklescan/security/advisories/GHSA-7q5r-7gvp-wc82 | Sonatype | ExploitVendor Advisory |
| https://www.sonatype.com/security-advisories/cve-2025-1944 | Sonatype |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-345 | Insufficient Verification of Data Authenticity | Sonatype |
Affected Products
| Product | Versions |
|---|---|
| mmaitre314 picklescan | < 0.0.23 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | Sonatype |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Dec 29, 2025 | CVE Modified | Sonatype |
| Mar 19, 2025 | Initial Analysis | [email protected] |
| Mar 10, 2025 | New CVE Received | Sonatype |