LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-bounds writes at attacker-chosen offsets in the leaf_depth_ buffer during feature contribution computation.
Attack Parameters
Attack Vector
Local
Requires local access
Attack Complexity
Low
Easy to exploit
Attack Requirements
None
No additional conditions
Privileges Required
None
No privileges needed
User Interaction
Passive
Minimal interaction
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v4.0
Weakness Type (CWE)
References 5
https://github.com/lightgbm-org/LightGBM
disclosure@vulncheck.com
https://github.com/lightgbm-org/LightGBM/blob/v4.6.0/include/LightGBM/tree.h#L6…
disclosure@vulncheck.com
https://github.com/lightgbm-org/LightGBM/blob/v4.6.0/src/io/tree.cpp#L750-L766
disclosure@vulncheck.com
https://github.com/lightgbm-org/LightGBM/issues/7357
disclosure@vulncheck.com
https://www.vulncheck.com/advisories/lightgbm-through-4.7.0-out-of-bounds-write…
disclosure@vulncheck.com