6 matches found
CVE-2026-92786
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-bounds writes at attacker-chosen...
CVE-2026-92786 LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-bounds writes at attacker-chosen...
EUVD-2026-81049
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-bounds writes at attacker-chosen...
CVE-2026-92786 LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-bounds writes at attacker-chosen...
CVE-2026-92786 LightGBM through 4.7.0 Out-of-Bounds Write via Crafted Model
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node references that trigger out-of-bounds writes at attacker-chosen...
CVE-2026-92786
LightGBM versions through 4.7.0 are affected by an out-of-bounds write vulnerability triggered during SHAP prediction (feature contribution computation). The root cause is a failure to validate child and split array values when parsing text model files. An attacker can craft a malicious model fil...