CVE-2026-75093: A security vulnerability has been detected in sonos tract up to 0.23.4. This impacts the function Tensor::from_raw_dt_al
mediumvulnerability
security
Summary
A security vulnerability (CVE-2026-75093) was found in sonos tract software up to version 0.23.4 that incorrectly calculates buffer sizes (memory allocation amounts) in a specific function, potentially allowing remote attacks. The vulnerability has been publicly disclosed and can be exploited.
Solution / Mitigation
Apply patch 66b10bda8895f4bfaf8c205361f0125cdf51f99b to resolve the issue.
Vulnerability Details
CVSS Score
4.3(medium)
EPSS (30-day exploit probability)
EPSS: 0.0%
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Attack Vector
network
Attack Complexity
low
Privileges Required
none
User Interaction
required
Disclosure Date
August 17, 2026
Classification
Attack SophisticationModerate
Impact (CIA+S)
availability
AI Component TargetedFramework
Affected Vendors
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75093
First tracked: August 18, 2026 at 02:10 AM
Classified by LLM (prompt v3) · confidence: 72%