CTranslate2 before 4.8.1 Out-of-Bounds Read via Model Deserialization
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.9epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
CTranslate2 before 4.8.1 contains an out-of-bounds heap read vulnerability in the binary model loader when deserializing string fields without null terminators. Attackers can craft malicious model files to trigger heap memory reads past buffer boundaries, causing crashes or disclosing adjacent heap memory contents.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
OpenNMT · CTranslate2References
https://github.com/OpenNMT/CTranslate2https://github.com/OpenNMT/CTranslate2/blob/v4.8.0/src/models/model.cc#L81-L87https://github.com/OpenNMT/CTranslate2/commit/d9b991e0700933a0c05373df8b52ed89cdcab96dhttps://github.com/OpenNMT/CTranslate2/pull/2068https://github.com/OpenNMT/CTranslate2/releases/tag/v4.8.1https://www.vulncheck.com/advisories/ctranslate2-before-4.8.1-out-of-bounds-read-via-model-deserialization