MLX has heap-buffer-overflow in load()
Priority MEDIUM 64CWE-122Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · Low
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.
Summary
MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.0056 46th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed mlx (ml-explore): 0.29.4mlx (PyPI): 0.29.4
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ml-explore | mlx | before 0.29.4 | 0.29.4 | Patch available | CNA |
| — | mlx (PyPI) | before 0.29.4 | 0.29.4 | Patch available | GHSA-w6vg-jg77-2qg6 |
- mlx Vendorml-explore Affected before 0.29.4 Fixed in 0.29.4 Patch available CNA
- mlx (PyPI) Vendor— Affected before 0.29.4 Fixed in 0.29.4 Patch available GHSA-w6vg-jg77-2qg6
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ml-explore:mlx:*:*:*:*:*:*:*:* | before 0.29.4 | Vulnerable | ml-explore |
- cpe:2.3:a:ml-explore:mlx:*:*:*:*:*:*:*:* Versions before 0.29.4 Vulnerable ·ml-explore
Remediation
- Fix · CNA mlx (ml-explore) Fixed in 0.29.4
- Fix · GHSA-w6vg-jg77-2qg6 mlx (PyPI) Fixed in 0.29.4 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
Not affected: 1 product
- Red Hat Ansible Automation Platform 2
Timeline
- 2026-10-02 Threatist record created from CVE-2025-62608
- 2026-10-03 Alias added: GHSA-w6vg-jg77-2qg6
References
More ml-explore Mlx vulnerabilities
- TI-2025-38824 MLX has Wild Pointer Dereference in load_gguf() CVSS 4.0MEDIUM 5.5
Sources
- CVE-2025-62608 · CVE Program
- CVE-2025-62608 · NVD
- FIRST EPSS
- GHSA-w6vg-jg77-2qg6 · GitHub Advisory Database · CC BY 4.0
- CVE-2025-62608 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences