CVE-2025-71345

The CVE describes a vulnerability in the Python package picklescan where versions prior to 0.0.30 fail to detect malicious pickle files that invoke the function torch.utils.bottleneck.main .run_autograd_prof . This can allow attackers to embed code in pickle data that executes during deserializat...

CVE-2025-71345 picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof

picklescan before 0.0.30 fails to detect malicious pickle files that invoke torch.utils.bottleneck.main.runautogradprof function. Attackers can embed undetected code in pickle files that executes during deserialization, enabling remote code execution...