CVEvulnerability
CVE-2026-102567
6.9 MEDIUM
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-09-29
- Last modified
- 2026-09-30
- Assigner
- [email protected]
- CVSS 4.0 ([email protected])
- 6.9 MEDIUM — CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
- Weaknesses
- CWE-125
Description
CTranslate2 before 4.8.1 contains an out-of-bounds heap read vulnerability in the binary model loader when deserializing string fields without null terminators. Attackers can craft malicious model files to trigger heap memory reads past buffer boundaries, causing crashes or disclosing adjacent heap memory contents.
Related
Weakness · CWE (1)
- CWE-125 Out-of-bounds Read weakness
References
- https://github.com/OpenNMT/CTranslate2 github.com
- https://github.com/OpenNMT/CTranslate2/blob/v4.8.0/src/models/model.cc#L81-L87 github.com
- https://github.com/OpenNMT/CTranslate2/commit/d9b991e0700933a0c05373df8b52ed89cdcab96d github.com
- https://github.com/OpenNMT/CTranslate2/pull/2068 github.com
- https://github.com/OpenNMT/CTranslate2/releases/tag/v4.8.1 github.com
- https://www.vulncheck.com/advisories/ctranslate2-before-4.8.1-out-of-bounds-read-via-model-deserialization www.vulncheck.com