CVE-2026-0897

high

Published 2026-05-06 · Modified 2026-05-20

CVSS v3

—

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2

—

VIR risk

8.0

Description

Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0 through 3.13.0 on all platforms allows a remote attacker to cause a Denial of Service (DoS) through memory exhaustion and a crash of the Python interpreter via a crafted .keras archive containing a valid model.weights.h5 file whose dataset declares an extremely large shape.

Predictions

Exploit likelihood

30%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2026-0897

OS impact

OS	Version	Status	Fixed in
debian	bullseye	affected

Package impact

Ecosystem	Package	Vulnerable	Fixed
PyPI	keras	`>=3.0.0,<3.12.1`	`3.12.1`
PyPI	keras	`>=3.13.0,<3.13.2`	`3.13.2`
PyPI	keras	`>=3.0.0,<3.13.1`	`3.13.1`
PIP	keras	`>= 3.13.0, < 3.13.2`	`3.13.2`
PIP	keras	`>= 3.0.0, <= 3.12.0`	`3.12.1`

References

Verify integrity in audit chain (admin only). AS-IS.