Vulnerabilidades do Ml-explore Mlx

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Ml-explore Mlx: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:ml-explore:mlx

CVE-2025-62609 Alta · 7.5 CWE-476 21/11/2025

MLX has Wild Pointer Dereference in load_gguf()

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This issue has been patched in version 0.29.4.

CVE-2025-62608 Crítica · 9.1 CWE-122 21/11/2025

MLX has heap-buffer-overflow in load()

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.