Vulnerability Details CVE-2025-71378
picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load().
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 25.6%
CVSS Severity
CVSS v3 Score 8.1
References
Products affected by CVE-2025-71378
-
cpe:2.3:a:mmaitre314:picklescan:-
-
cpe:2.3:a:mmaitre314:picklescan:0.0.1
-
cpe:2.3:a:mmaitre314:picklescan:0.0.10
-
cpe:2.3:a:mmaitre314:picklescan:0.0.11
-
cpe:2.3:a:mmaitre314:picklescan:0.0.12
-
cpe:2.3:a:mmaitre314:picklescan:0.0.13
-
cpe:2.3:a:mmaitre314:picklescan:0.0.14
-
cpe:2.3:a:mmaitre314:picklescan:0.0.15
-
cpe:2.3:a:mmaitre314:picklescan:0.0.16
-
cpe:2.3:a:mmaitre314:picklescan:0.0.17
-
cpe:2.3:a:mmaitre314:picklescan:0.0.18
-
cpe:2.3:a:mmaitre314:picklescan:0.0.19
-
cpe:2.3:a:mmaitre314:picklescan:0.0.2
-
cpe:2.3:a:mmaitre314:picklescan:0.0.20
-
cpe:2.3:a:mmaitre314:picklescan:0.0.21
-
cpe:2.3:a:mmaitre314:picklescan:0.0.22
-
cpe:2.3:a:mmaitre314:picklescan:0.0.23
-
cpe:2.3:a:mmaitre314:picklescan:0.0.24
-
cpe:2.3:a:mmaitre314:picklescan:0.0.25
-
cpe:2.3:a:mmaitre314:picklescan:0.0.26
-
cpe:2.3:a:mmaitre314:picklescan:0.0.27
-
cpe:2.3:a:mmaitre314:picklescan:0.0.28
-
cpe:2.3:a:mmaitre314:picklescan:0.0.29
-
cpe:2.3:a:mmaitre314:picklescan:0.0.3
-
cpe:2.3:a:mmaitre314:picklescan:0.0.4
-
cpe:2.3:a:mmaitre314:picklescan:0.0.5
-
cpe:2.3:a:mmaitre314:picklescan:0.0.6
-
cpe:2.3:a:mmaitre314:picklescan:0.0.7
-
cpe:2.3:a:mmaitre314:picklescan:0.0.8
-
cpe:2.3:a:mmaitre314:picklescan:0.0.9