{"data":{"id":"b0862dc1-8372-4b25-a9cf-a839596f2e52","title":"CVE-2026-12570: A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading…","summary":"CVE-2026-12570 affects keras-team/keras versions up to and including 3.15.0. A crafted .keras file loaded through keras.models.load_model() can make H5IOStore.__getitem__ in keras/src/saving/saving_lib.py allocate memory without bound, because dataset shape and size are not validated. The resulting out-of-memory condition terminates the process with exit code 137, and the flaw bypasses the earlier fix for CVE-2026-0897.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-12570","publishedAt":"2026-08-10T07:16:44.370Z","cveId":"CVE-2026-12570","cweIds":["CWE-770"],"cvssScore":null,"cvssSeverity":null,"severity":"medium","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":["keras@< 3.15.0 (fixed: 3.15.0)"],"affectedPackageNames":["keras"],"affectedPackageRefs":["pypi:keras"],"affectedVendors":[],"affectedVendorsRaw":["Keras"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"keras-team/keras denial of service via malicious .keras model files","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0019,"epssCheckedAt":"2026-11-10T00:11:22.478Z","kevDateAdded":null,"advisoryAliases":["GHSA-74m6-m3xx-3vmj"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:45:40.841Z","patchAvailable":true,"disclosureDate":"2026-08-10T07:16:44.370Z","fixReleasedAt":"2026-06-24T23:17:10.808Z","daysToFix":-47,"fixCheckedAt":"2026-10-29T21:32:04.847Z","capecIds":["CAPEC-130"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["availability"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"keras","fixedVersion":"3.15.0","matchedVersion":"3.15.0","fixReleasedAt":"2026-06-24T23:17:10.808Z","daysToFix":-47,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:32:04.699Z"}]}}