Severity by source
Local file vector; no privileges needed; user/application must load crafted file; DoS only, no C/I impact.
Estimated by vuln.today — no official severity rating has been published for this CVE yet.
Lifecycle Timeline
2DescriptionCVE.org
[datasets: NULL dereference on unexpected ndjson files]
AnalysisAI
NULL pointer dereference in the datasets library (likely HuggingFace datasets or a similar data-processing package) crashes the host process when parsing unexpected or malformed NDJSON (Newline Delimited JSON) files. Any application or pipeline that loads attacker-influenced NDJSON data through the affected library is exposed to a denial-of-service condition. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the target application use the affected 'datasets' library to load or parse an NDJSON file whose content or structure is 'unexpected' (the exact trigger condition is not defined in available data). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Risk signals are sparse: no CVSS vector, no CWE, no EPSS score, no KEV listing, and no POC have been recorded. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No exact fix version has been confirmed in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today