CVE-2026-47747 stable-diffusion.cpp has a Heap-based Buffer Overflow

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the BINUNICODE opcode...

CVE-2026-47747 stable-diffusion.cpp has a Heap-based Buffer Overflow

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the BINUNICODE opcode...

CVE-2026-24228

creationtimestamp| type| source ---|---|--- 2026-06-16 18:26:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moggebqyog2n 2026-06-16 19:00:42+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogibms44f2a 2026-07-20 04:27:04+00:00| seen|...

CVE-2026-47750

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the GLOBAL opcode...

CVE-2026-47750

The CVE-2026-47750 issue affects stable-diffusion.cpp in its pickle (.ckpt) parser (src/model.cpp). A heap buffer overflow occurs in the GLOBAL opcode handler due to missing validation while locating newline-delimited fields; a crafted .ckpt from an untrusted source can cause the parser to copy w...

CVE-2026-44932

creationtimestamp| type| source ---|---|--- 2026-06-16 17:53:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogeiujyy724 2026-06-16 18:00:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mogewtkvur2r...

CVE-2024-24909

creationtimestamp| type| source ---|---|--- 2026-06-16 17:38:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mogdpbkw632c 2026-06-16 20:45:13+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mogo4kdafl2r 2026-06-25 07:00:40+00:00| seen|...

CVE-2026-47749

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORTBINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt pars...

CVE-2026-47749 stable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint files

stable-diffusion.cpp is a pure C/C++ library for running diffusion model Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORTBINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt pars...

Symlink Attack

Overview langchain-anthropic is an Integration package connecting Claude Anthropic APIs and LangChain Affected versions of this package are vulnerable to Symlink Attack via the file-search middleware and loaders that resolve filesystem paths and search patterns without confining the resolved path...

GHSA-JRPJ-WCV7-9FH9 Astro: XSS via Unescaped Attribute Names in Spread Props

Summary The spreadAttributes function in Astro's server-side rendering pipeline iterates over object keys and passes them directly to addAttribute, which interpolates the key into the HTML output without escaping. When a developer uses the spread syntax ...props on an HTML element and the object...

CVE-2026-6039

A flaw was found in LibreOffice. This vulnerability, a heap buffer overflow, occurs when processing specially crafted DXF Drawing Exchange Format polyline files. An attacker could exploit this by convincing a user to open a malicious DXF file, which may lead to a denial of service DoS due to...

CVE-2026-49772

creationtimestamp| type| source ---|---|--- 2026-06-16 13:01:19+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu6j6ze72f 2026-06-16 13:37:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofw7xjz7z2v 2026-07-13 22:00:21+00:00| seen|...

CVE-2026-40750

creationtimestamp| type| source ---|---|--- 2026-06-16 13:00:48+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mofu63mapu2n 2026-06-16 13:18:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofv5ajgi62i 2026-06-23 13:18:19+00:00| seen|...

CVE-2026-8443

creationtimestamp| type| source ---|---|--- 2026-06-16 07:00:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mof7zbnval2y 2026-06-16 09:17:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mofhpn2qmv2x...

CVE-2026-7273

creationtimestamp| type| source ---|---|--- 2026-06-16 03:57:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116757774658704043 2026-06-16 04:02:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moew44qmwy2n 2026-06-16 05:00:09+00:00| seen|...

GHSA-PW6J-QG29-8W7F

creationtimestamp| type| source ---|---|--- 2026-06-16 01:11:21+00:00| seen| https://gist.github.com/alon710/23808c1f8380a92515abff40b7e06b99 2026-06-16 01:11:25+00:00| seen| https://gist.github.com/alon710/43bcbcd716ebc4457fa6fbcb1b087336 2026-06-16 01:21:14+00:00| seen|...

CVE-2026-48853

creationtimestamp| type| source ---|---|--- 2026-06-16 00:00:37+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3moeikz22zn2e 2026-06-16 00:00:42+00:00| seen| https://infosec.exchange/users/offseq/statuses/116756842721787890 2026-06-16 00:23:17+00:00| seen|...

PT-2026-49749

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07 Description An out-of-bounds read error exists during PyTorch checkpoint pickle opcode parsing. The pickle .ckpt parser in the src/model.cpp file fails to consistently verify that...

PT-2026-49829

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07 Description The pickle .ckpt parser in src/model.cpp contains a heap buffer overflow in the BINUNICODE opcode handler. This occurs due to sign confusion on the opcode length field, wher...