{"data":{"id":"69538623-8a2c-4ffb-b596-a771d17638e3","title":"CVE-2026-47749: stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image…","summary":"CVE-2026-47749 affects stable-diffusion.cpp releases prior to master-584-0a7ae07. A sign confusion on the opcode length field in the SHORT_BINUNICODE handler of the pickle .ckpt parser in src/model.cpp allows a heap buffer overflow when a crafted .ckpt file triggers memcpy with a very large length. This can crash the process and may potentially enable code execution, depending on heap layout, and requires the victim or application to load a .ckpt file from an untrusted source.","solution":"The issue has been resolved in version master-584-0a7ae07. If developers cannot update immediately, avoid loading .ckpt checkpoint files from untrusted sources, use trusted model sources, and prefer safer formats such as .safetensors where possible.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-47749","publishedAt":"2026-06-16T19:16:55.867Z","cveId":"CVE-2026-47749","cweIds":["CWE-122","CWE-787"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["stable-diffusion.cpp","Stable Diffusion","Flux","Wan","Qwen Image","Z-Image"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"stable-diffusion.cpp heap buffer overflow in SHORT_BINUNICODE parsing","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00203,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-03T00:09:38.666Z","patchAvailable":null,"disclosureDate":"2026-06-16T19:16:55.867Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-100"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[]}}