CVE-2026-73325

Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with...

CVE-2026-73325

CVE-2026-73325 concerns Fujitsu Research’s OneCompression library 1.2.0, where an unsafe deserialization vulnerability arises when loading a crafted model.pt checkpoint. The root cause is QuantizedModelLoader.load_quantized_model_pt() unconditionally calling torch.load with weights_only=False, wh...

CVE-2026-73325

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with weightsonly=False,...

EUVD-2026-57313

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with weightsonly=False,...

CVE-2026-73325 Fujitsu OneCompression < 1.2.1 Arbitrary Code Execution via torch.load Deserialization

Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with...

CVE-2026-73325 Fujitsu OneCompression < 1.2.1 Arbitrary Code Execution via torch.load Deserialization

Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.loadquantizedmodelpt unconditionally calls torch.load with...

PT-2026-71147

Fujitsu Research's OneCompression library 1.2.0 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load quantized model pt unconditionally calls torch.load with weights only=Fals...