CVE-2025-62608: MLX has heap-buffer-overflow in load()

November 21, 2025 (updated June 6, 2026)

Heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure.

Environment:

OS: Ubuntu 20.04.6 LTS
Compiler: Clang 19.1.7

References

github.com/advisories/GHSA-w6vg-jg77-2qg6
github.com/ml-explore/mlx/pull/1
github.com/ml-explore/mlx/pull/2
github.com/ml-explore/mlx/security/advisories/GHSA-w6vg-jg77-2qg6
github.com/pypa/advisory-database/tree/main/vulns/mlx/PYSEC-2025-138.yaml
nvd.nist.gov/vuln/detail/CVE-2025-62608

Code Behaviors & Features

Detect and mitigate CVE-2025-62608 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →