CVE-2025-5197

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-5197
A Regular Expression Denial of Service (ReDoS) vulnerability exists in the Hugging Face Transformers library, specifically in the `convert_tf_weight_name_to_pt_weight_name()` function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern `/[^/]*___([^/]*)/` that can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. The vulnerability affects versions up to 4.51.3 and is fixed in version 4.53.0. This issue can lead to service disruption, resource exhaustion, and potential API service vulnerabilities, impacting model conversion processes between TensorFlow and PyTorch formats.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/huggingface/transformers/commit/944b56000be5e9b61af8301aa340838770ad8a0b Patch
https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf Exploit Third Party Advisory Issue Tracking Patch
https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf Exploit Third Party Advisory Issue Tracking Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:huggingface:transformers:*:*:*:*:*:*:*:*
History

21 Oct 2025, 16:46

Type Values Removed Values Added
First Time Huggingface transformers
Huggingface
References () https://github.com/huggingface/transformers/commit/944b56000be5e9b61af8301aa340838770ad8a0b - () https://github.com/huggingface/transformers/commit/944b56000be5e9b61af8301aa340838770ad8a0b - Patch
References () https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf - () https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf - Exploit, Third Party Advisory, Issue Tracking, Patch
CPE cpe:2.3:a:huggingface:transformers:*:*:*:*:*:*:*:*

06 Aug 2025, 13:15

Type Values Removed Values Added
References () https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf - () https://huntr.com/bounties/3f8b3fd0-166b-46e7-b60f-60dd9d2678bf -
Summary
  • (es) Existe una vulnerabilidad de denegación de servicio de expresiones regulares (ReDoS) en la librería Hugging Face Transformers, específicamente en la función `convert_tf_weight_name_to_pt_weight_name()`. Esta función, responsable de convertir los nombres de peso de TensorFlow al formato de PyTorch, utiliza un patrón de expresiones regulares `/[^/]*___([^/]*)/` que puede explotarse para causar un consumo excesivo de CPU mediante cadenas de entrada manipuladas debido a un retroceso catastrófico. La vulnerabilidad afecta a las versiones hasta la 4.51.3 y se corrigió en la versión 4.53.0. Este problema puede provocar interrupciones del servicio, agotamiento de recursos y posibles vulnerabilidades del servicio API, lo que afecta los procesos de conversión de modelos entre los formatos de TensorFlow y PyTorch.

06 Aug 2025, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-06 12:15

Updated : 2025-10-21 16:46

NVD link : CVE-2025-5197

Mitre link : CVE-2025-5197

CVE.ORG link : CVE-2025-5197

JSON object : View

Products Affected

huggingface

  • transformers
CWE
CWE-1333

Inefficient Regular Expression Complexity