A malicious model file is enough to corrupt memory in CTranslate2 — the inference engine behind Whisper, OpenNMT, and dozens of AI applications. Two memory-safety flaws disclosed September 29, 2026. Both affect CTranslate2 before 4.8.1. Both are fixed in 4.8.1. The CVEs CVE CVSS Type Component CVE-2026-102566 7.8 CWE-120 Heap Buffer Overflow... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
CTranslate2 CVE-2026-102566 & CVE-2026-102567 — Heap Overflow in AI Model Loader
A malicious model file is enough to corrupt memory in CTranslate2 — the inference engine behind Whisper, OpenNMT, and dozens of AI applications. Two memory-safety flaws disclosed September 29, 2026. Both affect CTranslate2 before 4.8.1. B…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR