CVE-2025-10156CWE-755

CVE-2025-10156

Critical 路 published September 17, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

馃毃 A cleverly crafted ZIP file is all it takes to fool the system! This vulnerability lets attackers bypass security scans, leaving your network open to malicious code execution. 馃敟 Think of it as a faulty delivery truck that breaks down at a checkpoint, allowing every package inside to slip past inspection without a second glance. The moment that truck halts due to an untraceable error, the real trouble starts with unmonitored packages! An attacker can exploit this vulnerability to execute malicious code undetected. This means they could gain unauthorized access to sensitive data, manipulate files, or even take full control of the systems connected to your network! Absolutely devastating!

Put simply

Think of it as a faulty delivery truck that breaks down at a checkpoint, allowing every package inside to slip past inspection without a second glance. The moment that truck halts due to an untraceable error, the real trouble starts with unmonitored packages! This improper handling of exceptional conditions in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to halt the scanner during CRC checks, bypassing security measures designed to detect harmful pickle files.

What to do

An attacker can exploit this vulnerability to execute malicious code undetected. This means they could gain unauthorized access to sensitive data, manipulate files, or even take full control of the systems connected to your network! Absolutely devastating! Immediately update to the patched version of mmaitre314 picklescan. Review your security protocols and ensure that all ZIP files are scanned thoroughly, regardless of any CRC errors. Consider implementing additional checks to prevent such crafty bypasses! You've got this! With a quick patch and a fresh look at your security measures, you'll be back to superhero status in no time! 馃Ω

The record
Technical detail
CVSS v3.1
9.8 路 CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01481 路 73.7th percentile
Weakness
CWE-755 路 Improper Handling of Exceptional Conditions
Published
2025-09-17T15:15Z
Affected products (1)
ProductVersionsFixed in
mmaitre314/picklescan< 0.0.310.0.31
References (4)
EPSS history
Timeline
  • 17 SEP 10:41Z
    PickleScan Security Bypass via Bad CRC in ZIP Archive
    cvelistv5