CVE-2025-65213

MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code execution. An attacker can craft a malicious pickle file that executes arbitrary Python code when loaded, enabling remote code execution with the privileges of the victim process.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/MooreThreads/torch_musa/issues/110#issuecomment-3475809588	Exploit Issue Tracking

Configurations

Configuration 1 (hide)

cpe:2.3:a:mthreads:torch_musa:*:*:*:*:*:*:*:*

History

14 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) MooreThreads torch_musa en todas sus versiones contiene una vulnerabilidad de deserialización insegura en torch_musa.utils.compare_tool. Las funciones compare_for_single_op() y nan_inf_track_for_single_op() utilizan pickle.load() en rutas de archivo controladas por el usuario sin validación, lo que permite la ejecución de código arbitrario. Un atacante puede crear un archivo pickle malicioso que ejecuta código Python arbitrario al cargarse, lo que permite la ejecución remota de código con los privilegios del proceso víctima.

Information

Published : 2025-12-15 19:16

Updated : 2026-10-14 13:10

NVD link : CVE-2025-65213

Mitre link : CVE-2025-65213

CVE.ORG link : CVE-2025-65213

JSON object : View

Products Affected

mthreads

torch_musa

CWE

CWE-502

Deserialization of Untrusted Data

{"id": "CVE-2025-65213", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-65213", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-15T18:58:14.707692Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2025-12-15T19:16:05.207", "references": [{"url": "https://github.com/MooreThreads/torch_musa/issues/110#issuecomment-3475809588", "tags": ["Exploit", "Issue Tracking"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-502"}]}], "descriptions": [{"lang": "en", "value": "MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code execution. An attacker can craft a malicious pickle file that executes arbitrary Python code when loaded, enabling remote code execution with the privileges of the victim process."}, {"lang": "es", "value": "MooreThreads torch_musa en todas sus versiones contiene una vulnerabilidad de deserializaci\u00f3n insegura en torch_musa.utils.compare_tool. Las funciones compare_for_single_op() y nan_inf_track_for_single_op() utilizan pickle.load() en rutas de archivo controladas por el usuario sin validaci\u00f3n, lo que permite la ejecuci\u00f3n de c\u00f3digo arbitrario. Un atacante puede crear un archivo pickle malicioso que ejecuta c\u00f3digo Python arbitrario al cargarse, lo que permite la ejecuci\u00f3n remota de c\u00f3digo con los privilegios del proceso v\u00edctima."}], "lastModified": "2026-10-14T13:10:00.187", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:mthreads:torch_musa:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9483B7D-B6A7-4C6B-A10C-F650C89482CB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}