{"id":"PYSEC-2025-138","details":"MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.","aliases":["CVE-2025-62608","GHSA-w6vg-jg77-2qg6"],"modified":"2026-05-20T09:19:08.409674Z","published":"2025-11-21T19:16:02.267Z","references":[{"type":"FIX","url":"https://github.com/ml-explore/mlx/pull/1"},{"type":"FIX","url":"https://github.com/ml-explore/mlx/pull/2"},{"type":"EVIDENCE","url":"https://github.com/ml-explore/mlx/security/advisories/GHSA-w6vg-jg77-2qg6"}],"affected":[{"package":{"name":"mlx","ecosystem":"PyPI","purl":"pkg:pypi/mlx"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29.4"}]}],"versions":["0.0.10","0.0.11","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.9","0.1.0","0.10.0","0.11.1","0.12.2","0.13.0","0.13.1","0.14.1","0.15.2","0.16.3","0.17.3","0.18.1","0.19.3","0.2.0","0.20.0","0.21.1","0.22.1","0.23.2","0.24.2","0.25.2","0.26.1","0.26.2","0.26.3","0.26.5","0.27.1","0.28.0","0.29.0","0.29.1","0.29.2","0.29.3","0.3.0","0.4.0","0.5.1","0.6.0","0.7.0","0.8.1","0.9.1"],"database_specific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/mlx/PYSEC-2025-138.yaml"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"}]}