CVE-2026-124959

The loadIndex function in nmslib hnswlib and Spotify Voyager is vulnerable to a buffer overflow because it fails to verify that the element count in a serialized HNSW index matches the stored capacity used for heap buffer allocation. An attacker providing a crafted index file with an element coun...

EUVD-2026-120081

The loadIndex function in nmslib hnswlib and Spotify Voyager does not verify that the element count in a serialized HNSW index is within the stored capacity used to allocate the heap buffer. An attacker can supply a crafted index file with an element count greater than the stored capacity, causin...