AML.T0076

Corrupt AI Model

An adversary may purposefully corrupt a malicious AI model file so that it cannot be successfully deserialized in order to evade detection by a model scanner. The corrupt model may still successfully execute malicious code before deserialization fails.

9 CVEs mapped View on MITRE ATLAS →

Severity	CVE	Headline	Package	CVSS
HIGH	CVE-2021-41203	TensorFlow: malformed checkpoint triggers overflow/crash	tensorflow	7.8
HIGH	CVE-2025-10156	Picklescan: CRC bypass hides malicious pickle in ZIP	picklescan	7.5
HIGH	CVE-2025-0317	Ollama: DoS via malicious GGUF model file upload	ollama	7.5
HIGH	CVE-2025-0312	Ollama: null pointer DoS via malicious GGUF model upload	ollama	7.5
HIGH	CVE-2024-8063	ollama: divide-by-zero DoS via crafted GGUF model import	ollama	7.5
HIGH	CVE-2024-12055	Ollama: DoS via malicious gguf model file upload	ollama	7.5
HIGH	CVE-2020-15206	TensorFlow: SavedModel protobuf DoS in inference serving	tensorflow	7.5
HIGH	CVE-2025-62609	mlx: security flaw enables exploitation	mlx	7.5
MEDIUM	CVE-2025-68146			6.3