CVE-2026-110698

MEDIUM 6.3

Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write

CVSS Score

6.3

EPSS Score

0.0%

EPSS Percentile

0th

A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a910d21a2705ef4cd16d91f29cdc8da1ab1a7221. To fix this issue, it is recommended to deploy a patch. The project maintainer confirms: "We did a quick fix (suggested fix 1) for Praat version 7.0.03, and scheduled a better fix (suggested fix 2)."

CWE	CWE-787 CWE-119
Vendor	n/a
Product	praat
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for n/a praat

Be the first to know when new medium vulnerabilities affecting n/a praat are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

n/a / Praat

7.0.02

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/419892 vuldb.com: https://vuldb.com/vuln/419892/cti vuldb.com: https://vuldb.com/cve/CVE-2026-110698 vuldb.com: https://vuldb.com/submit/1004713 github.com: https://github.com/praat/praat.github.io/issues/3348 github.com: https://github.com/PaulBoersma/praat/commit/a910d21a2705ef4cd16d91f29cdc8da1ab1a7221

Credits

🔍 Dem00000 (VulDB User) VulDB CNA Team