VulnerabilityDeferred

CVE-2025-71362

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings.

HIGH 7.6EPSS 0.43%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.43%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

picklescan before 0.0.33 fails to detect unsafe deserialization when numpy.f2py.crackfortran functions call eval on arbitrary strings. Attackers can embed malicious code in pickle files that executes when loaded from untrusted sources.

CVSS 4.0: 7.6 HIGHCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.43% probability · 36th percentile
CISA KEV: Not listed
Weakness: CWE-502
Source: disclosure@vulncheck.com

References

https://github.com/mmaitre314/picklescan/security/advisories/GHSA-r8g5-cgf2-4m4m
https://www.vulncheck.com/advisories/picklescan-arbitrary-code-execution-via-unsafe-deserialization-in-numpy-f2py-crackfortran
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-r8g5-cgf2-4m4m

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.