mlx vulnerabilities

2 known vulnerabilities in mlx from Ml-explore. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  mlx: NULL Pointer Dereference

  CVE-2025-62609Nov 21, 2025Ml-explore

  MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validat

• 9.1 Critical severity

  mlx: Heap-based Buffer Overflow

  CVE-2025-62608Nov 21, 2025Ml-explore

  MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash