CVE-2026-124959

The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count greater than the stored capacity, causin...

CVE-2026-124959 Nmaslib Hnswlib and Spotify Voyager HNSW Index Deserialization Heap Out-of-Bounds Write

The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count greater than the stored capacity, causin...

CVE-2026-124959

The loadIndex function in nmslib hnswlib and Spotify Voyager is vulnerable to a buffer overflow because it fails to verify that the element count in a serialized HNSW index matches the stored capacity used for heap buffer allocation. An attacker providing a crafted index file with an element coun...

EUVD-2026-120081

The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count greater than the stored capacity, causin...

PT-2026-140431

Name of the Vulnerable Software and Affected Versions mslib affected versions not specified hnswlib affected versions not specified Spotify Voyager affected versions not specified Description The loadIndex function fails to verify if the element count in a serialized HNSW index is within the stor...

CVE-2026-124959: Spotify, hnswlib: The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized…

The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count greater than the stored capacity, causin...

Fedora 20 : ikiwiki-3.20140125-1.fc20 (2014-1747)

Update to the latest stable version. Changes in ikiwiki 3.20140125 : - inline: Allow overriding the title of the feed. Closes: http://bugs.debian.org/735123 Thanks, Christophe Rhodes - osm: Escape name parameter. Closes: http://bugs.debian.org/731797 Changes in ikiwiki 3.20140102 : - aggregate:...