Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-108954— k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow

Quick assessment

Affected
k2-fsa sherpa-onnx
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 k2-fsa sherpa-onnx 1.13.8 及更早版本中发现了一个漏洞。该漏洞影响组件“Offline Transducer Greedy Search Decoder”中的函数 OfflineTransducerGreedySearchDecoder::Decode，该函数位于文件 sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc 中。对参数 vocab_size 的不当处理会导致缓冲区溢出。此漏洞可被远程利用。目前该漏洞的利用代

CVSS 6.3 · Medium EPSS 0.27% · P17

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Affected Version Matrix 9

VendorProduct Version RangeStatus
k2-fsa sherpa-onnx 1.13.0 affected
1.13.1 affected
1.13.2 affected
1.13.3 affected
1.13.4 affected
1.13.5 affected
1.13.6 affected
1.13.7 affected
… +1 more rows
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-108954

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
k2-fsa sherpa-onnx Offline Transducer Greedy Search Decoder offline-transducer-greedy-search-decoder.cc Decode buffer overflow
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in k2-fsa sherpa-onnx up to 1.13.8. This issue affects the function OfflineTransducerGreedySearchDecoder::Decode of the file sherpa-onnx/csrc/offline-transducer-greedy-search-decoder.cc of the component Offline Transducer Greedy Search Decoder. The manipulation of the argument vocab_size results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used. If only official model packs are used and they always keep metadata consistent with the joiner, the bug may not be reachable in normal supported usage. However, from a security and robustness standpoint, the code still contains the vulnerability because it trusts unvalidated model metadata and can be triggered by a malformed or tampered model pack.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
k2-fsa sherpa-onnx 1.13.0 cpe:2.3:a:k2-fsa:sherpa-onnx:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-108954

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-108954

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-108954 (1)

Security Blog Posts for CVE-2026-108954 (1)

Other References for CVE-2026-108954 (1)

IV. Related Vulnerabilities

Same weakness: CWE-120

V. Comments for CVE-2026-108954

No comments yet

Leave a comment