CVE-2026-124959

The loadIndex function in nmslib hnswlib and Spotify Voyager is vulnerable to a buffer overflow because it fails to verify that the element count in a serialized HNSW index matches the stored capacity used for heap buffer allocation. An attacker providing a crafted index file with an element coun...