CVE-2026-70660mediumCWE-125

CVE-2026-70660: falha de média gravidade em leejet stable-diffusion.cpp

stable-diffusion.cpp: Out-of-bounds read in safetensors loader: unvalidated data_offsets allow a tensor's byte range to extend past the end of the file

Publicada em

Seguir esta CVE+ Monitorar stable-diffusion.cpp

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.1%
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Prior to master-764-e22272e, the safetensors loader in src/model_io/safetensors_io.cpp trusts each tensor's data_offsets after checking only that nbytes equals end - begin. A crafted .safetensors file can declare a byte range beyond the file's data section, causing src/model_loader.cpp to consume an attacker-chosen length from an unchecked mapped-file offset. Loading the model can read adjacent process memory into tensor buffers or crash the process. This issue is fixed in master-764-e22272e.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
leejet · stable-diffusion.cpp
CVEs relacionadas — leejet stable-diffusion.cpp

No mesmo produto, das mais perigosas para as menos.

CVE-2026-47749HIGHstable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint filesEPSS 0.2%CVE-2026-47747HIGHstable-diffusion.cpp has a Heap-based Buffer OverflowEPSS 0.2%CVE-2026-47750HIGHstable-diffusion.cpp: Heap buffer overflow in GLOBAL opcode parsing for PyTorch checkpoint filesEPSS 0.2%CVE-2026-47748MEDIUMstable-diffusion.cpp: Out-of-bounds reads in PyTorch checkpoint pickle opcode parsingEPSS 0.2%CVE-2026-70659HIGHstable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor nameEPSS 0.1%