CWE-502

Medium likelihood

Deserialization of Untrusted Data

Parent: CWE-913 - Improper Control of Dynamically-Managed Code Resources

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

2,991 vulnerabilities with CWE-502
CVE-2026-22606 HIGH
fickling < 0.1.7 - Incomplete List of Disallowed Inputs in runpy Module Handling
CVSS 7.8
CVE-2026-22187 HIGH
openmicroscopy/bio-formats <= 8.3.0 - Deserialization of Untrusted Data via Memoization Cache Files
CVSS 7.8
CVE-2025-71375 HIGH
picklescan - Undetected Remote Code Execution via _operator.methodcaller
CVSS 8.1
CVE-2025-71372 HIGH
Picklescan - Arbitrary Code Execution via numpy.f2py.crackfortran.getlincoef Gadget
CVSS 8.1
CVE-2025-71369 HIGH
picklescan - Unsafe Deserialization via torch.utils.data.datapipes.utils.decoder.basichandlers
CVSS 8.1
CVE-2025-71367 HIGH
picklescan - Remote Code Execution via _operator.attrgetter Detection Bypass
CVSS 8.1
CVE-2025-71366 HIGH
picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_cprofile
CVSS 8.1
CVE-2025-71364 HIGH
picklescan - Arbitrary Code Execution via Undetected asyncio.unix_events._UnixSubprocessTransport._start
CVSS 8.1
CVE-2025-71362 HIGH
picklescan - Arbitrary Code Execution via Unsafe Deserialization in numpy.f2py.crackfortran
CVSS 8.1
CVE-2025-71360 HIGH
picklescan - Remote Code Execution via Undetected idlelib.calltip.get_entity
CVSS 8.1
CVE-2025-71359 HIGH
picklescan - Unsafe Deserialization via lib2to3.pgen2.grammar.Grammar.loads
CVSS 8.1
CVE-2025-71356 HIGH
picklescan - Arbitrary Code Execution via torch.fx.experimental.symbolic_shapes.ShapeEnv.evaluate_guards_expression
CVSS 8.1
CVE-2025-71353 HIGH
picklescan - Remote Code Execution via torch._dynamo.guards.GuardBuilder.get
CVSS 8.1
CVE-2025-71347 HIGH
picklescan - Undetected Remote Code Execution via numpy.f2py.crackfortran.param_eval
CVSS 8.1
CVE-2025-71345 HIGH
picklescan - Arbitrary Code Execution via torch.utils.bottleneck.__main__.run_autograd_prof
CVSS 8.1
CVE-2025-71343 HIGH
picklescan - Arbitrary Code Execution via lib2to3.pgen2.pgen.ParserGenerator.make_label Detection Bypass
CVSS 8.1
CVE-2025-71342 HIGH
picklescan - Undetected Remote Code Execution via idlelib.run.Executive.runcode
CVSS 8.1
CVE-2025-71374 HIGH
picklescan - Arbitrary Code Execution via Undetected profile.Profile.run
CVSS 8.1
CVE-2025-71371 HIGH
picklescan - Remote Code Execution via code.InteractiveInterpreter Detection Bypass
CVSS 8.1
CVE-2025-71368 HIGH
picklescan - Arbitrary Code Execution via Undetected doctest.debug_script
CVSS 8.1
CVE-2025-71363 HIGH
picklescan - Arbitrary Code Execution via Undetected cProfile.run in Pickle Deserialization
CVSS 8.1
CVE-2025-71350 HIGH
picklescan - Undetected Remote Code Execution via torch.utils.collect_env.run
CVSS 8.1
CVE-2025-71349 HIGH
picklescan - Arbitrary Code Execution via Undetected trace.Trace.run in Pickle Files
CVSS 8.1
CVE-2025-71340 HIGH
picklescan - Remote Code Execution via idlelib.pyshell.ModifiedInterpreter.runcode
CVSS 8.1
CVE-2025-71354 HIGH
picklescan - Remote Code Execution via idlelib.debugobj.ObjectTreeItem.SetText
CVSS 8.1
Details
Vulnerabilities 2,991
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits