{"data":{"id":"f3b2f048-bd55-4fea-bea3-27e4a7d71223","title":"CVE-2025-1944: picklescan before 0.0.23 is vulnerable to a ZIP archive manipulation attack that causes it to crash when attempting to…","summary":"picklescan before 0.0.23 can be made to crash when it extracts and scans PyTorch model archives. An attacker modifies the filename in the ZIP header while keeping the original name in the directory listing, causing PickleScan to raise a BadZipFile error. PyTorch's more forgiving ZIP implementation still loads the model, so malicious payloads can bypass detection.","solution":"Fixed in commit e58e45e0d9e091159c1554f9b04828bbb40b9781 (GitHub commit linked as a Sonatype patch).","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-1944","publishedAt":"2025-03-10T16:15:10.967Z","cveId":"CVE-2025-1944","cweIds":["CWE-345"],"cvssScore":"6.5","cvssSeverity":"medium","severity":"medium","attackType":["model_poisoning","supply_chain"],"issueType":"vulnerability","affectedPackages":["picklescan@< 0.0.23 (fixed: 0.0.23)"],"affectedPackageNames":["picklescan"],"affectedPackageRefs":["pypi:picklescan"],"affectedVendors":[],"affectedVendorsRaw":["picklescan","PyTorch"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"picklescan ZIP archive manipulation crashes scan of PyTorch model archives","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0033,"epssCheckedAt":"2026-11-04T00:12:27.579Z","kevDateAdded":null,"advisoryAliases":["GHSA-7q5r-7gvp-wc82"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:31.561Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-03-09T22:32:39.127Z","daysToFix":-1,"fixCheckedAt":"2026-10-29T21:45:06.185Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"model","llmSpecific":false,"classifierConfidence":0.93,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"picklescan","fixedVersion":"0.0.23","matchedVersion":"0.0.23","fixReleasedAt":"2025-03-09T22:32:39.127Z","daysToFix":-1,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:45:06.034Z"}]}}