CVE-2026-12570

{
  "id": "CVE-2026-12570",
  "sourceIdentifier": "[email protected]",
  "published": "2026-08-10T07:16:44.370",
  "lastModified": "2026-10-23T20:10:00.160",
  "vulnStatus": "Awaiting Analysis",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function. The H5IOStore.__getitem__ method in keras/src/saving/saving_lib.py does not validate the shape or size of datasets, leading to unbounded memory allocation. A specially crafted .keras file can exploit this flaw to trigger an out-of-memory (OOM) condition, causing the process to be terminated (exit code 137). This issue bypasses the fix for CVE-2026-0897, which only addressed a similar vulnerability in KerasFileEditor. The attack vector includes poisoned models from public repositories or malicious model registries, posing a risk to machine learning pipelines that process untrusted models."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en las versiones menor o igual que 3.15.0 de keras-team/keras permite un ataque de denegación de servicio (DoS) al cargar archivos de modelo .keras maliciosos a través de la función keras.models.load_model(). El método H5IOStore.__getitem__ en keras/src/saving/saving_lib.py no valida la forma o el tamaño de los conjuntos de datos, lo que lleva a una asignación de memoria ilimitada. Un archivo .keras especialmente diseñado puede explotar esta falla para desencadenar una condición de falta de memoria (OOM), lo que provoca la terminación del proceso (código de salida 137). Este problema elude la corrección para CVE-2026-0897, que solo abordó una vulnerabilidad similar en KerasFileEditor. El vector de ataque incluye modelos envenenados de repositorios públicos o registros de modelos maliciosos, lo que representa un riesgo para las tuberías de aprendizaje automático que procesan modelos no confiables."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "keras-team",
          "product": "keras-team/keras",
          "versions": [
            {
              "version": "unspecified",
              "lessThan": "3.12.3, 3.15.0",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV30": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.0",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-08-10T17:37:17.637683Z",
          "id": "CVE-2026-12570",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/keras-team/keras/commit/4933ea4a5b3fcc24ceacdc276f5bb5dfbd06756c",
      "source": "[email protected]"
    },
    {
      "url": "https://huntr.com/bounties/a064f475-780a-409a-82f7-678512f27ad8",
      "source": "[email protected]"
    },
    {
      "url": "https://huntr.com/bounties/a064f475-780a-409a-82f7-678512f27ad8",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}