CVE-2026-47747

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07

Description The pickle .ckpt parser in src/model.cpp contains a heap buffer overflow in the BINUNICODE opcode handler. This occurs due to sign confusion on the opcode length field, where a crafted .ckpt file can trigger a memcpy() function with an excessively large length derived from a negative signed value, leading to immediate heap corruption.

Recommendations Update to version master-584-0a7ae07. As a temporary workaround, load .ckpt checkpoint files only from trusted sources and prefer safer formats such as .safetensors.