CVE-2026-102566
CTranslate2 before 4.8.1 Heap Buffer Overflow via model.bin
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
CTranslate2 before 4.8.1 contains a heap-based buffer overflow in the binary model loader that fails to validate payload length against allocated buffer size. Attackers can craft malicious model files with oversized payload lengths to write past heap allocation boundaries, causing crashes or arbitrary code execution.
| CWE | CWE-787 |
| Vendor | opennmt |
| Product | ctranslate2 |
| Published | Sep 29, 2026 |
| Last Updated | Sep 29, 2026 |
Stay Ahead of the Next One
Get instant alerts for opennmt ctranslate2
Be the first to know when new high vulnerabilities affecting opennmt ctranslate2 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
OpenNMT / CTranslate2
0 < 4.8.1
References
github.com: https://github.com/OpenNMT/CTranslate2/pull/2068 github.com: https://github.com/OpenNMT/CTranslate2/commit/d9b991e0700933a0c05373df8b52ed89cdcab96d github.com: https://github.com/OpenNMT/CTranslate2/blob/v4.8.0/src/models/model.cc#L656-L657 github.com: https://github.com/OpenNMT/CTranslate2/releases/tag/v4.8.1 github.com: https://github.com/OpenNMT/CTranslate2 vulncheck.com: https://www.vulncheck.com/advisories/ctranslate2-before-4.8.1-heap-buffer-overflow-via-model-bin
Credits
Chegne Eu Joe