CVE-2026-47750

Name of the Vulnerable Software and Affected Versions stable-diffusion.cpp versions prior to master-584-0a7ae07

Description The pickle .ckpt parser in src/model.cpp contains a heap buffer overflow in the GLOBAL opcode handler. This occurs due to missing validation when searching for newline-delimited fields. A specially crafted .ckpt file lacking the expected newline can cause the parser to use -1 as a copy length, leading to immediate heap corruption. Exploitation requires the application or user to load a .ckpt file from an untrusted source.

Recommendations Update to version master-584-0a7ae07. Avoid loading .ckpt checkpoint files from untrusted sources. Use safer formats such as .safetensors when possible.