Downloads · 30 days
0
pyarrow-rce
rajasingh010/pyarrow-rce
pyarrow-rce is a machine learning model from rajasingh010. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as apache-2.0.
File: python/pyarrow/types.pxi Function: PyExtensionType autoload CVE: CVE-2023-47248
Access
Public
Updated Apr 4, 2026
Repo size
666 B
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 45%
At a glance
- License
- apache-2.0
- Access
- Public
- Created
- Apr 4, 2026
- Updated
- Apr 4, 2026
- SHA
- 725248b5
Model card
From the Hugging Face model README
PyArrow Unsafe Deserialization — CVE-2023-47248 PoC
WARNING: MALICIOUS FILE — SECURITY RESEARCH ONLY
Vulnerability
File: python/pyarrow/types.pxi
Function: PyExtensionType autoload
CVE: CVE-2023-47248
Description
PyArrow 0.14.0 through 14.0.0 has py_extension_type_auto_load = True by
default. When reading IPC/Parquet/Feather files, __arrow_ext_deserialize__
calls pickle.loads() on untrusted extension metadata, enabling RCE.
# Vulnerable path when reading IPC/Parquet files
__arrow_ext_deserialize__(self, serialized):
return pickle.loads(serialized) # RCE!
Impact
- Severity: Critical (CVSS 9.8)
- Attack Vector: Victim reads malicious .arrow/.feather file → RCE
- Fix: PyArrow 14.0.1+ sets
py_extension_type_auto_load = False
Reproduction
import pyarrow.ipc as ipc
reader = ipc.open_file("malicious_pyarrow.arrow")
table = reader.read_all() # RCE triggered
References
- License
- apache-2.0
- Created
- Apr 4, 2026
- Updated
- Apr 4, 2026