CVE-2025-62372: Unguarded Tensor Base64 Load
Loading tensors directly from base64-encoded strings without prior configuration gating or shape validation can permit a Denial of Service (DoS) attack. If malformed multimodal embeddings or mismatched tensor shapes are passed to downstream operations, the application may crash. Ensure that loading arbitrary tensors is explicitly gated by an opt-in configura
Pythongreprules fetch cve-2025-62372-unguarded-tensor-base64-load --engine opengrepDescription
Loading tensors directly from base64-encoded strings without prior configuration gating or shape validation can permit a Denial of Service (DoS) attack. If malformed multimodal embeddings or mismatched tensor shapes are passed to downstream operations, the application may crash. Ensure that loading arbitrary tensors is explicitly gated by an opt-in configura
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.