CVE-2026-47747 — Security Box Score

CVE · referencelatest edition

Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-47747HIGH

leejet stable-diffusion.cpp — stable-diffusion.cpp has a Heap-based Buffer Overflow

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   R  U  H  H  H    7.8   .0018    7.9     —

AFFECTED
  Product               Versions                Fixed
  stable-diffusion.cpp  < master-584-0a7ae07 –  —

TIMELINE
  May 19  Reserved by GitHub_M
  Jun 16  EXPLOIT PUBLISHED — CVE-2026-47747 (leejet stable-diffusion.cpp). Public exploit reference added.
  Jun 16  Published (CNA: GitHub_M)

CWE-122, CWE-787 · CNA: GitHub_M · CVSS v3.1 · 3 references · NVD status: Analyzed

Description

stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. In versions prior to master-584-0a7ae07, the pickle .ckpt parser in src/model.cpp contained a heap buffer overflow vulnerability in the BINUNICODE opcode handler. The issue was caused by sign confusion on the opcode length field. A crafted .ckpt file could trigger memcpy with a very large length derived from a negative signed value, causing immediate heap corruption. The issue has been resolved in version master-584-0a7ae07. If developers are unable to immediately update their applications they can work around this issue by only loading .ckpt checkpoint files from trusted sources and preferring trusted model sources and safer formats such as .safetensors where possible.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
May 19, 2026	Reserved	Reserved by GitHub_M
June 16, 2026	EXPLOIT PUBLISHED	EXPLOIT PUBLISHED — CVE-2026-47747 (leejet stable-diffusion.cpp). Public exploit reference added.
June 16, 2026	Published	Published (CNA: GitHub_M)

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
leejet	stable-diffusion.cpp	—	< master-584-0a7ae07	—

Weaknesses

CWE-122 · CWE-787

References (3)

https://github.com/leejet/stable-diffusion.cpp/commit/0a7ae07f948eff4611968a65a22bd7c7031ad74f [Patch]
https://github.com/leejet/stable-diffusion.cpp/pull/1443 [Issue Tracking, Patch]
https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-mghm-5mqc-pwmp [Exploit, Mitigation, Vendor Advisory]

Authoritative record: CVE-2026-47747 at cve.org

Vendors: leejet

Weaknesses: CWE-122 · CWE-787

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-47747 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.