{"data":{"id":"1e8fb746-0113-4365-a037-8e62ebedcf1d","title":"CVE-2026-47748: stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image…","summary":"CVE-2026-47748 affects stable-diffusion.cpp releases before master-584-0a7ae07, a C/C++ library for diffusion model inference. The pickle .ckpt parser in src/model.cpp advances its buffer without checking remaining input, so a crafted or truncated checkpoint can trigger out-of-bounds reads. Exploitation requires an application or user to load a .ckpt file from an untrusted source, such as a model sharing site.","solution":"Fixed in master-584-0a7ae07. If immediate updating is not possible, do not load .ckpt checkpoint files from untrusted sources, prefer trusted model sources, and use .safetensors where possible.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47748","publishedAt":"2026-06-16T19:16:55.720Z","cveId":"CVE-2026-47748","cweIds":["CWE-125"],"cvssScore":"5.5","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["stable-diffusion.cpp","Stable Diffusion","Flux","Wan","Qwen Image","Z-Image","PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"stable-diffusion.cpp out-of-bounds reads in PyTorch checkpoint pickle parsing","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00163,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:38.929Z","patchAvailable":null,"disclosureDate":"2026-06-16T19:16:55.720Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-540"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability","confidentiality"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}