Approved changes feed: RSS · Atom
cpe:2.3:a:google:keras:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Google (f181d1eb-7269-5bae-b76e-e66ceb214562) |
|---|---|
| Product | Keras (0268056a-e392-52b0-a09c-98e86ff560f2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1669 |
vulnerable | 2026-06-08 07:49:09.325501 |
Arbitrary File Read in Keras via HDF5 External Datasets
Arbitrary file read in the model loading mechanism (HDF5 integration) in Keras versions 3.0.0 through 3.13.1 on all supported platforms allows a remote attacker to read local files and disclose sensitive information via a crafted .keras model file utilizing HDF5 external dataset references.
Published: 2026-02-11T22:10:10.031Z
Updated: 2026-07-15T01:21:16.008Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-0897 |
vulnerable | 2026-06-08 07:47:13.457508 |
Denial of Service in Keras via Excessive Memory Allocation in HDF5 Metadata
Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.
Published: 2026-01-15T14:09:53.603Z
Updated: 2026-07-15T01:23:41.519Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-8747 |
vulnerable | 2026-06-08 07:45:21.094926 |
Keras safe_mode bypass allows arbitrary code execution when loading a malicious model.
A safe mode bypass vulnerability in the `Model.load_model` method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted `.keras` model archive.
Published: 2025-08-11T07:21:16.619Z
Updated: 2026-02-26T17:49:45.906Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1550 |
vulnerable | 2026-06-08 07:08:37.277696 |
Arbitrary Code Execution via Crafted Keras Config for Model Loading
The Keras Model.load_model function permits arbitrary code execution, even with safe_mode=True, through a manually constructed, malicious .keras archive. By altering the config.json file within the archive, an attacker can specify arbitrary Python modules and functions, along with their arguments, to be loaded and executed during model loading.
Published: 2025-03-11T08:12:34.974Z
Updated: 2025-07-24T15:28:42.230Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.