HighVulnerability
CVE-2026-47749: stable-diffusion.cpp heap buffer overflow in SHORT_BINUNICODE parsing
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-47749
- Published
- Record updated
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.2%
Summary
CVE-2026-47749 affects stable-diffusion.cpp releases prior to master-584-0a7ae07. A sign confusion on the opcode length field in the SHORT_BINUNICODE handler of the pickle .ckpt parser in src/model.cpp allows a heap buffer overflow when a crafted .ckpt file triggers memcpy with a very large length. This can crash the process and may potentially enable code execution, depending on heap layout, and requires the victim or application to load a .ckpt file from an untrusted source.
Mitigation
The issue has been resolved in version master-584-0a7ae07. If developers cannot update immediately, avoid loading .ckpt checkpoint files from untrusted sources, use trusted model sources, and prefer safer formats such as .safetensors where possible.
Related items
- MediumResearchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak ToolkitSimilar attack · The Hacker News
- InfoTop agent skill security resources — November 2026Similar attack · Adversa AI Blog
- HighCVE-2026-118627: MLflow SHAP load_explainer untrusted deserialization enables code executionSimilar attack · NVD/CVE Database
- HighCVE-2026-118623: MLflow PickleEvaluationArtifact remote code execution via untrusted pickleSimilar attack · NVD/CVE Database
- HighCVE-2026-88968: Claude Code Edit tool symlink race overwrites files outside workspace on macOSSimilar attack · NVD/CVE Database