CVE-2026-47747 Details
Description
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the BINUNICODE opcode handler. The issue was caused by sign confusion on the opcode length field. A crafted .ckpt file could trigger memcpy with a very large length derived from a negative signed value, causing immediate heap corruption. The issue has been resolved in version master-584-0a7ae07. If developers are unable to immediately update their applications they can work around this issue by only loading .ckpt checkpoint files from trusted sources and preferring trusted model sources and safer formats such as .safetensors where possible.
A heap buffer overflow vulnerability has been identified in the stable-diffusion.cpp library, specifically in the pickle .ckpt parser within the BINUNICODE opcode handler. This vulnerability is present in versions prior to master-584-0a7ae07. The issue arises from a sign confusion in the opcode length field, allowing a crafted .ckpt file to trigger memcpy with an excessively large length derived from a negative signed value. This exploitation leads to immediate heap corruption. The vulnerability has been patched in version master-584-0a7ae07.
Users are advised to upgrade to stable-diffusion.cpp version master-584-0a7ae07 or later. If an immediate upgrade is not possible, .ckpt files should only be loaded from trusted sources, and safer formats like .safetensors should be preferred when available.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jun 17, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-mghm-5mqc-pwmp | CISA-ADP | ExploitMitigationVendor Advisory |
| https://github.com/leejet/stable-diffusion.cpp/commit/0a7ae07f948eff4611968a65a22bd7c7031ad74f | [email protected] | Patch |
| https://github.com/leejet/stable-diffusion.cpp/pull/1443 | [email protected] | Issue TrackingPatch |
| https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-mghm-5mqc-pwmp | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-122 | Heap-based Buffer Overflow | [email protected] |
| CWE-787 | Out-of-bounds Write | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| leejet stable-diffusion.cpp | < master-584-0a7ae07 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 25, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 16, 2026 | New CVE Received | [email protected] |