by Kastro
Paper/Archive/CVE-2025-71325

CVE-2025-71325

picklescan picklescan — picklescan - Detection Bypass via STACK_GLOBAL Opcode Parsing Logic Flaw

EPSS 0.6%public exploitCVSS 9.8
critical.is priorityof 100
49
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 48.9.489 × 209.8Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to track arguments in the correct range and allowing malicious pickle files to bypass detection. Attackers can craft pickle files with arguments at position zero to trigger unexpected exceptions and evade security scanning.

Affected

ProductAffectedFixed inSource
picklescan< 0.0.270.0.27CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitgithub.com/mmaitre314/picklescan/security/advisories/GHSA-9gvj-pp9x-gcfrpatchgithub.com/mmaitre314/picklescan/commit/2a8383cfeb4158567f9770d86597300c9e508d0fwriteupvulncheck.com/advisories/picklescan-detection-bypass-via-stack-global-opcode-parsing-logic-flaw