CVE-2026-47749— leejet stable-diffusion.cpp 缓冲区错误漏洞

stable-diffusion.cpp: Heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint files

stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. Versions prior to master-584-0a7ae07 are vulnerable to heap buffer overflow in SHORT_BINUNICODE parsing for PyTorch checkpoint files. The pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the SHORT_BINUNICODE opcode handler. The issue was caused by sign confusion on the opcode length field. A crafted .ckpt file could trigger memcpy with a very large length derived from a negative signed value, causing immediate heap corruption. Any application using affected stable-diffusion.cpp releases to load untrusted .ckpt model files could be vulnerable. A malicious checkpoint file could cause heap corruption through memcpy with an attacker-controlled length. This may lead to process crash and could potentially be leveraged for code execution depending on heap layout. The attack requires the victim or application to load a .ckpt file from an untrusted source, such as a downloaded model from a model sharing site. The issue has been resolved in version master-584-0a7ae07. If developers are unable to immediately update their applications they can work around this issue by not loading .ckpt checkpoint files from untrusted sources, and referring to trusted model sources and safer formats such as .safetensors where possible.

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

跨界内存写

leejet stable-diffusion.cpp 缓冲区错误漏洞

stable-diffusion.cpp是leejet个人开发者的一种基于C++的纯推理扩散模型实现。 leejet stable-diffusion.cpp master-584-0a7ae07之前版本存在缓冲区错误漏洞，该漏洞源于对PyTorch checkpoint文件的SHORT_BINUNICODE解析中存在堆缓冲区溢出，由操作码长度字段的符号混淆导致，攻击者可借助特制的.ckpt文件通过memcpy触发堆损坏，可能导致进程崩溃或潜在的代码执行。

N/A

N/A