Sentencepiece

1 CVEs product

Monthly

CVE-2026-1260 HIGH PATCH This Week

Sentencepiece versions below 0.2.1 are vulnerable to memory corruption when processing specially crafted model files, allowing local authenticated attackers to crash the application or potentially execute arbitrary code. This vulnerability requires a malicious model file that deviates from standard training procedures, affecting AI/ML applications that use vulnerable Sentencepiece libraries. No patch is currently available.

Buffer Overflow AI / ML Sentencepiece Redhat
NVD GitHub
CVSS 3.1
7.8
EPSS
0.0%
CVE-2026-1260
EPSS 0% CVSS 7.8
HIGH PATCH This Week

Sentencepiece versions below 0.2.1 are vulnerable to memory corruption when processing specially crafted model files, allowing local authenticated attackers to crash the application or potentially execute arbitrary code. This vulnerability requires a malicious model file that deviates from standard training procedures, affecting AI/ML applications that use vulnerable Sentencepiece libraries. No patch is currently available.

Buffer Overflow AI / ML Sentencepiece +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy