CVE-2025-62609: Ml-Explore Mlx

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This issue has been patched in version 0.29.4.

Affected products

• Ml-Explore Mlx: before 0.29.4 (fixed in 0.29.4)

Published 2025-11-21. Last modified 2026-10-08.