Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-47748— stable-diffusion.cpp: Out-of-bounds reads in PyTorch checkpoint pickle opcode parsing

Quick assessment

Affected
leejet stable-diffusion.cpp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

stable-diffusion.cpp是leejet个人开发者的一种基于C++的纯推理扩散模型实现。 leejet stable-diffusion.cpp master-584-0a7ae07之前版本存在缓冲区错误漏洞，该漏洞源于PyTorch checkpoint pickle操作码解析过程中未能持续检查足够的输入余量，可能导致越界读取错误，应用程序加载恶意或截断的.ckpt文件时可能造成崩溃。

CVSS 5.5 · Medium EPSS 0.16% · P6

Affected Version Matrix 1

VendorProduct Version RangeStatus
leejet stable-diffusion.cpp < master-584-0a7ae07 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-47748

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
stable-diffusion.cpp: Out-of-bounds reads in PyTorch checkpoint pickle opcode parsing
Source: CVE Program / CVE List V5
Vulnerability Description
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to an out-of-bounds reads error through PyTorch checkpoint pickle opcode parsing. The pickle .ckpt parser in src/model.cpp did not consistently check that enough input remained before reading opcode arguments or advancing the parser buffer with a crafted or truncated .ckpt file. Throughout the pickle parser, opcode handlers advanced the parser position with expressions such as buffer += N without first checking that buffer + N <= buffer_end. A truncated file could therefore cause reads past the end of the metadata buffer. LibFuzzer found crashes in under one second using malformed checkpoint inputs. Any application using affected stable-diffusion.cpp releases to load untrusted .ckpt model files could be vulnerable. The attack requires the victim or application to load a .ckpt file from an untrusted source, such as a downloaded model from a model sharing site. This issue has been fixed in version master-584-0a7ae07. If developers are unable to immediately update their applications, they can work around this issue by ensuring they do not load .ckpt checkpoint files from untrusted sources. They should prefer trusted model sources and safer formats such as .safetensors where possible.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
leejet stable-diffusion.cpp 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
stable-diffusion.cpp是leejet个人开发者的一种基于C++的纯推理扩散模型实现。 leejet stable-diffusion.cpp master-584-0a7ae07之前版本存在缓冲区错误漏洞，该漏洞源于PyTorch checkpoint pickle操作码解析过程中未能持续检查足够的输入余量，可能导致越界读取错误，应用程序加载恶意或截断的.ckpt文件时可能造成崩溃。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
leejet stable-diffusion.cpp < master-584-0a7ae07 -

II. Public POCs for CVE-2026-47748

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-47748

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-47748 (1)

Same Patch Batch · leejet · 2026-06-16 · 4 CVEs total

CVE-2026-47749 7.8 HIGH stable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpo
CVE-2026-47750 7.8 HIGH stable-diffusion.cpp: Heap buffer overflow in GLOBAL opcode parsing for PyTorch checkpoint
CVE-2026-47747 7.8 HIGH stable-diffusion.cpp has a Heap-based Buffer Overflow

IV. Related Vulnerabilities

Same product: stable-diffusion.cpp
Same vendor: leejet
Same weakness: CWE-125