CVE-2025-62608

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/ml-explore/mlx/pull/1	Issue Tracking Patch
https://github.com/ml-explore/mlx/pull/2	Issue Tracking Patch
https://github.com/ml-explore/mlx/security/advisories/GHSA-w6vg-jg77-2qg6	Exploit Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:ml-explore:mlx:*:*:*:*:*:*:*:*

History

08 Oct 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) MLX es un framework de arrays para aprendizaje automático en silicio de Apple. Antes de la versión 0.29.4, existe un desbordamiento de búfer de montón en mlx::core::load() al analizar archivos NumPy .npy maliciosos. Un archivo controlado por el atacante causa una lectura fuera de límites de 13 bytes, lo que lleva a un fallo o revelación de información. Este problema ha sido parcheado en la versión 0.29.4.

Information

Published : 2025-11-21 19:16

Updated : 2026-10-08 10:10

NVD link : CVE-2025-62608

Mitre link : CVE-2025-62608

CVE.ORG link : CVE-2025-62608

JSON object : View

Products Affected

ml-explore

mlx

CWE

CWE-122

Heap-based Buffer Overflow

{"id": "CVE-2025-62608", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-62608", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-21T19:09:52.499633Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.2, "exploitabilityScore": 3.9}], "cvssMetricV40": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.5, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "PROOF_OF_CONCEPT", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "ml-explore", "product": "mlx", "versions": [{"status": "affected", "version": "< 0.29.4"}]}]}], "published": "2025-11-21T19:16:02.267", "references": [{"url": "https://github.com/ml-explore/mlx/pull/1", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/ml-explore/mlx/pull/2", "tags": ["Issue Tracking", "Patch"], "source": "security-advisories@github.com"}, {"url": "https://github.com/ml-explore/mlx/security/advisories/GHSA-w6vg-jg77-2qg6", "tags": ["Exploit", "Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4."}, {"lang": "es", "value": "MLX es un framework de arrays para aprendizaje autom\u00e1tico en silicio de Apple. Antes de la versi\u00f3n 0.29.4, existe un desbordamiento de b\u00fafer de mont\u00f3n en mlx::core::load() al analizar archivos NumPy .npy maliciosos. Un archivo controlado por el atacante causa una lectura fuera de l\u00edmites de 13 bytes, lo que lleva a un fallo o revelaci\u00f3n de informaci\u00f3n. Este problema ha sido parcheado en la versi\u00f3n 0.29.4."}], "lastModified": "2026-10-08T10:10:00.227", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ml-explore:mlx:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C62C2D2D-92D7-4480-BDB9-56CECD1626E7", "versionEndExcluding": "0.29.4"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}