Vulnerability Description
picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickle files using ctypes.WinDLL to load kernel32.dll and execute arbitrary commands, bypassing sandbox protections and gadget chain detection.
CVSS Score
CRITICAL
Related Weaknesses (CWE)
References
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r
- https://www.vulncheck.com/advisories/picklescan-remote-code-execution-via-unbloc
- https://github.com/mmaitre314/picklescan/security/advisories/GHSA-4675-36f9-wf6r
FAQ
What is CVE-2025-71323?
CVE-2025-71323 is a vulnerability with a CVSS score of 9.8 (CRITICAL). picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking direct syscalls and accessing raw memory. Attackers can craft malicious pickl...
How severe is CVE-2025-71323?
CVE-2025-71323 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2025-71323?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.