PT-2025-38138 · Mmaitre314 · Picklescan

Jfrog + 1 · Published 2025-06-29 · Updated 2025-12-05 · CVE-2025-10156

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions mmaitre314 picklescan (affected versions not specified)

Description An Improper Handling of Exceptional Conditions vulnerability exists in the ZIP archive scanning component of mmaitre314 picklescan. This allows a remote attacker to bypass security scans by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC). When the file is incorrectly considered safe, it can lead to the execution of malicious code. The scanner halts and fails to analyze the contents for malicious pickle files when encountering a file with a bad CRC. This discrepancy between Picklescan and PyTorch's handling of CRC checks allows attackers to potentially hide malicious pickle payloads within ZIP archives that PyTorch might still be able to load. The issue occurs because Picklescan does not attempt to scan files within the archive when a bad CRC is detected, while PyTorch may bypass CRC checks in certain configurations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Protection Mechanism Failure

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-693

CWE-755

Related Identifiers

BDU:2025-15286

CVE-2025-10156

GHSA-4VR7-G93G-CF6M

GHSA-MJQP-26HC-GRXG

PYSEC-2025-152

Affected Products

Picklescan

References · 23

• 🔥 https://huggingface.co/jinaai/jina-embeddings-v2-base-en/resolve/main/pytorch_model.bin?download=true · Exploit
• 🔥 https://huggingface.co/jinaai/jina-embeddings-v2-base-en/tree/main · Exploit
• https://github.com/mmaitre314/picklescan/security/advisories/GHSA-mjqp-26hc-grxg · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-15286 · Security Note
• https://osv.dev/vulnerability/GHSA-mjqp-26hc-grxg · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2025-152 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4vr7-g93g-cf6m · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10156 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-10156 · Security Note
• https://github.com/pypa/advisory-database/tree/main/vulns/picklescan/PYSEC-2025-152.yaml · Note
• https://github.com/mmaitre314/picklescan/blob/v0.0.29/src/picklescan/relaxed_zipfile.py#L35 · Note
• https://github.com/mmaitre314/picklescan · Note
• https://github.com/mmaitre314/picklescan/commit/28a7b4ef753466572bda3313737116eeb9b4e5c5 · Note
• https://twitter.com/syedaquib77/status/1996821962350530827 · Twitter Post
• https://twitter.com/syedaquib77/status/1996821915718308195 · Twitter Post