Critical severity9.8NVD Advisory· Published Dec 15, 2025· Updated Jun 17, 2026
CVE-2025-65213
CVE-2025-65213
Description
MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool. The compare_for_single_op() and nan_inf_track_for_single_op() functions use pickle.load() on user-controlled file paths without validation, allowing arbitrary code execution. An attacker can craft a malicious pickle file that executes arbitrary Python code when loaded, enabling remote code execution with the privileges of the victim process.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:mthreads:torch_musa:*:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
1- github.com/MooreThreads/torch_musa/issues/110nvdExploitIssue Tracking
News mentions
0No linked articles in our index yet.