CVE-2025-62608
Medium · 6.5MLX has heap-buffer-overflow in load()
CVSS
6.5
EPSS
0.6%
Published
Nov 21, 2025
CISA due date
—
The record
Heap buffer overflow in `mlx::core::load()` when parsing malicious NumPy `.npy` files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. Environment: - OS: Ubuntu 20.04.6 LTS - Compiler: Clang 19.1.7
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | mlx | 0 | 0.29.4 |
Related vulnerabilities
- GHSA-w6vg-jg77-2qg6 MLX has heap-buffer-overflow in load() Same vulnerability
- GHSA-j842-xgm4-wf88 MLX has Wild Pointer Dereference in load_gguf() Also affects mlx
- CVE-2025-62609 MLX has Wild Pointer Dereference in load_gguf() Also affects mlx
- CVE-2026-112403 Pillow is a Python imaging library. CWE-122
- CVE-2026-112393 Pillow is a Python imaging library. CWE-122
- CVE-2026-112395 Pillow is a Python imaging library. CWE-122
- CVE-2026-103658 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer… CWE-122
- CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. CWE-122