CVE-2025-10156

PickleScan Security Bypass via Bad CRC in ZIP Archive

State: Published
Severity: 9.3 Critical
Published: Sep 17, 2025
Updated: Sep 17, 2025
Reserved: Sep 9, 2025

Description

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check (CRC), which causes the scanner to halt and fail to analyze the contents for malicious pickle files. When the file incorrectly considered safe is loaded, it can lead to the execution of malicious code.

Scores

CVSS	Score	Vector	Source
4.0	9.3 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N	JFROG

Weaknesses

CWE-755 Improper Handling of Exceptional Conditions

Affected Products

Product	Versions
picklescanmmaitre314	0.0.30 and earlierAffectedfrom 0.0.31Not affected

References

Proof of Concept (Archive with Bad CRC)exploit
Example of Failing Scan on Hugging Faceexploit
Vulnerable Code Snippetrelated
https://github.com/mmaitre314/picklescan/security/advisories/GHSA-mjqp-26hc-grxgvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.