8.6
Élevée
CVE-2025-8747 A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an…
Description
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Keras 3.0 | 3.0.0 → 3.10.0 | Pas de correctif indiqué |
Références
- github.com github.com
- jfrog.com jfrog.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Keras
Les 4 CVE de Keras →
CVE-2026-1669
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all…
7.1
Élevée
CVE-2026-0897
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0…
7.1
Élevée
CVE-2025-1550
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually…
7.3
Élevée