{"data":{"id":"f3494495-d03d-4698-aa21-2ced6fe14d3f","title":"CVE-2026-50144: ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit…","summary":"CVE-2026-50144 affects ncnn, a neural network inference framework for mobile platforms, in commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier. When Net::load_param() loads a malicious .param model file, ncnn::ParamDict::load_param() performs an out-of-bounds heap write, because the parsed parameter id is only checked against id >= NCNN_MAX_PARAM_COUNT, so a negative id indexes before the params[NCNN_MAX_PARAM_COUNT] array.","solution":"This vulnerability is fixed by commit 5a0288f255daa6c3294f77109f67718e434ec020.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-50144","publishedAt":"2026-07-15T20:17:13.500Z","cveId":"CVE-2026-50144","cweIds":["CWE-20","CWE-129","CWE-787"],"cvssScore":"7.1","cvssSeverity":"high","severity":"high","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["ncnn"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"ncnn out-of-bounds heap write in param loading from malicious .param file","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00159,"epssCheckedAt":"2026-10-14T18:05:59.662Z","kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-10T03:46:36.736Z","patchAvailable":null,"disclosureDate":"2026-07-15T20:17:13.500Z","capecIds":["CAPEC-100"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}