CVE-2025-62609 MLX has Wild Pointer Dereference in load_gguf()
An attacker can cause a denial of service by providing a malicious GGUF file to the MLX library, triggering a segmentation fault.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-62609?
CVE-2025-62609 is a medium-severity vulnerability in ml-explore mlx, published on 21 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This issue has been patched in version 0.29.4.
Weakness: CWE-476
Which versions are affected by CVE-2025-62609?
3 open source packages ship an affected version, including mlx. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
mlx PyPI | All versions | 0.29.4 |
mlx PyPI | All versions | 0.29.4 |
mlx PyPI | All versions | 0.29.4 |
Products include Ml-Explore Mlx.
How do I fix CVE-2025-62609?
Upgrade mlx to 0.29.4 or later.
Is CVE-2025-62609 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-62609 exists.
Other vulnerabilities in ml-explore mlx
Sources
Also known as GHSA-j842-xgm4-wf88, PYSEC-2025-139.