CVE-2026-47749

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07

Description A heap buffer overflow exists in the SHORT BINUNICODE parsing for PyTorch checkpoint files within the pickle .ckpt parser in src/model.cpp. The issue stems from sign confusion on the opcode length field, where a crafted .ckpt file can trigger a memcpy() function with an excessively large length derived from a negative signed value. This leads to heap corruption, which may cause the process to crash or potentially allow for code execution depending on the heap layout. The issue occurs when an application loads a .ckpt file from an untrusted source.

Recommendations Update to version master-584-0a7ae07. Avoid loading .ckpt checkpoint files from untrusted sources and use safer formats such as .safetensors where possible.