CVE-2025-1944

Summary

CVE-2025-1944 affects picklescan before version 0.0.23, where a ZIP archive manipulation vulnerability exists. An attacker can modify the filename in the ZIP header without changing the original filename in the directory listing, causing PickleScan to crash. However, PyTorch's less stringent ZIP implementation enables the malicious model archive to still be loaded, allowing potential bypass of detection and introduction of malicious payloads. This vulnerability can lead to the execution of untrusted code or denial of service. Users are advised to update to the latest version of picklescan to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.