CVE-2026-73325

creationtimestamp| type| source ---|---|--- 2026-08-12 16:36:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/6ptymvozbgjxg 2026-08-12 17:00:35+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msvm5cjlcv25...

CVE-2026-73325 Fujitsu OneCompression 1.2.0 Arbitrary Code Execution via torch.load Deserialization

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with weightsonly=False,...