Lucene search
+L

6 matches found

SUSE CVE
SUSE CVE
•added 2026/07/16 5:58 p.m.•20 views

SUSE CVE-2026-50144

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out-of-bounds heap write in ncnn::ParamDict::loadparam when Net::loadparam loads a malicious .param model file because th...

7.1CVSS6AI score0.00161EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/07/16 8:08 a.m.•40 views

CVE-2026-50144

A flaw was found in ncnn, a high-performance neural network inference framework. A remote attacker could craft a malicious model file that, when processed by a user, triggers an out-of-bounds heap write. This vulnerability in the ncnn::ParamDict::loadparam function is caused by insufficient...

7.1CVSS6.4AI score0.00161EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/15 8:17 p.m.•24 views

CVE-2026-50144

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out-of-bounds heap write in ncnn::ParamDict::loadparam when Net::loadparam loads a malicious .param model file because th...

7.1CVSS0.00161EPSS
SaveExploits0References2
CVE
CVE
•added 2026/07/15 8:04 p.m.•55 views

CVE-2026-50144

ncnn (mobile-optimized neural network framework) contains an out-of-bounds heap write in ParamDict::load_param() when loading a malicious .param model, caused by a negative parameter id indexing before params[NCNN_MAX_PARAM_COUNT]. This is exploitable via Net::load_param() and is fixed by commit ...

7.1CVSS6.1AI score0.00161EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/15 12:00 a.m.•33 views

PT-2026-60292

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out-of-bounds heap write in ncnn::ParamDict::load param when Net::load param loads a malicious .param model file because...

7.1CVSS6AI score0.00161EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/15 12:00 a.m.•8 views

CVE-2026-50144: Improper Input Validation

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out-of-bounds heap write in ncnn::ParamDict::loadparam when Net::loadparam loads a malicious .param model file because th...

7.1CVSS6AI score0.00161EPSS
SaveExploits0References4
Rows per page
Query Builder