stable-diffusion.cpp vulnerabilities
4 known CVE vulnerabilities in stable-diffusion.cpp, translated and rated.
- CVE-2026-47750High
The stable-diffusion.cpp library has a heap buffer overflow vulnerability in the GLOBAL opcode handler in the .ckpt parser, which can lead to memory corruption. This issue affects versions prior to master-584-0a7ae07 and is caused by missing validation when searching for newline-delimited fields.
- CVE-2026-47747High
The stable-diffusion.cpp library has a heap buffer overflow vulnerability in the BINUNICODE opcode handler in the .ckpt parser, which can lead to memory corruption. This issue affects versions prior to master-584-0a7ae07.
- CVE-2026-47749High
The stable-diffusion.cpp library has a heap buffer overflow vulnerability in the SHORT_BINUNICODE handler when parsing PyTorch checkpoint files. Versions prior to master-584-0a7ae07 are susceptible to attacks that may lead to heap corruption and potential code execution.
- CVE-2026-47748Medium
The stable-diffusion.cpp library, used for running diffusion models, has a vulnerability to an out-of-bounds read error in versions prior to master-584-0a7ae07. This issue arises from improper length checks during .ckpt file parsing, which can lead to reads past the end of the metadata buffer.