OtherMedium
CVE-2025-62609: MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a…
- Occurred
- Nov 21, 2025
- Published
- Nov 21, 2025
- Source
- NVD CVE
Summary
MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This issue has been patched in version 0.29.4.
Tags
- CVE
- CVE-2025-62609
- cvss:HIGH
Classification
Category confidence: 90%
Severity confidence: 85%
Rationale: CVE describes a segmentation fault vulnerability in MLX array framework, not an AI safety incident.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8