CVE-2026-110698— Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write
一分钟漏洞结论
影响对象
n/a Praat
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The a
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-110698 基础信息
漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write
来源: CVE Program / CVE List V5
Vulnerability Description
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a910d21a2705ef4cd16d91f29cdc8da1ab1a7221. To fix this issue, it is recommended to deploy a patch. The project maintainer confirms: "We did a quick fix (suggested fix 1) for Praat version 7.0.03, and scheduled a better fix (suggested fix 2)."
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
来源: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| - | Praat | 7.0.02 |
cpe:2.3:a:praat:praat:*:*:*:*:*:*:*:*
|
|
二、漏洞 CVE-2026-110698 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-110698 的情报信息
请登录查看更多情报信息。
CVE-2026-110698 其他参考 (5)
-
-
https://vuldb.com/cve/CVE-2026-110698 third-party-advisory
-
-
https://vuldb.com/submit/1004713 third-party-advisory
同批安全公告 · n/a · 2026-10-14 · 共 5 条
| CVE-2026-107350 | 8.8 HIGH | Authentication bypass via second StartupMessage during SCRAM authentication in PgBouncer |
| CVE-2026-107349 | 7.5 HIGH | Infinite loop on empty option name in startup options parameter in PgBouncer |
| CVE-2026-110679 | 7.3 HIGH | OpenSIPS rtpproxy rtpproxy_answer out-of-bounds |
| CVE-2026-107348 | 5.9 MEDIUM | Integer overflow causes an infinite loop in message buffer growth in PgBouncer |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-110679
OpenSIPS rtpproxy rtpproxy_answer out-of-bounds -
CVE-2026-107350
Authentication bypass via second StartupMessage during SCRAM -
CVE-2026-107349
Infinite loop on empty option name in startup options parame -
CVE-2026-107348
Integer overflow causes an infinite loop in message buffer g -
CVE-2026-109828
libsndfile WAV解析未初始化变量漏洞
Same weakness: CWE-787
-
CVE-2026-110839
FreeRDP 3.3.0 before 3.32.0 Heap Out-of-Bounds Write via Gra -
CVE-2026-86849
Dpdk: dpdk: integer overflow combined with missing validatio -
CVE-2026-86856
Dpdk: dpdk: stack and heap buffer overflow in nfp vdpa drive -
CVE-2026-86846
Dpdk: dpdk: guest can trigger out-of-bounds write by control -
CVE-2026-103415
CVE-2026-103415
V. Comments for CVE-2026-110698
暂无评论