GHSA-w6vg-jg77-2qg6
NoneCVSS
—
EPSS
—
Published
Nov 21, 2025
CISA due date
—
The record
MLX has heap-buffer-overflow in load()
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | mlx | 0 | 0.29.4 |
Related vulnerabilities
- CVE-2025-62608 MLX has heap-buffer-overflow in load() Same vulnerability
- GHSA-j842-xgm4-wf88 MLX has Wild Pointer Dereference in load_gguf() Also affects mlx
- CVE-2025-62609 MLX has Wild Pointer Dereference in load_gguf() Also affects mlx
- CVE-2026-112403 Pillow is a Python imaging library. CWE-122
- CVE-2026-112393 Pillow is a Python imaging library. CWE-122
- CVE-2026-112395 Pillow is a Python imaging library. CWE-122
- CVE-2026-103658 GNU Aspell 0.60.8.2 (first vulnerable version is not known) contains a heap-based buffer… CWE-122
- CVE-2026-107161 A heap-based buffer overflow flaw was found in Cyrus SASL. CWE-122