CVE-2026-110694

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-110694

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110694.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-110694

Published

2026-10-14T21:00:21Z

Modified

2026-10-15T10:47:27Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds

Details

A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-119",
        "CWE-125"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110694.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "1.6"
                },
                {
                    "last_affected":  "1.6"
                },
                {
                    "introduced":  "1.7"
                },
                {
                    "last_affected":  "1.7"
                },
                {
                    "introduced":  "1.8"
                },
                {
                    "last_affected":  "1.8"
                },
                {
                    "introduced":  "1.10"
                },
                {
                    "last_affected":  "1.10"
                },
                {
                    "introduced":  "1.11"
                },
                {
                    "last_affected":  "1.11"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/oaid/tengine

Affected ranges

Type

GIT

Repo

https://github.com/oaid/tengine

Events

Introduced

fa795ace75d5c06a8fd9356e333aef12cf585426

Last Affected

af213c9d7a20b038db3d46a483406f8cdac41050

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "1.0"
        },
        {
            "last_affected":  "1.0"
        },
        {
            "introduced":  "1.1"
        },
        {
            "last_affected":  "1.1"
        },
        {
            "introduced":  "1.12.0"
        },
        {
            "last_affected":  "1.12.0"
        },
        {
            "introduced":  "1.2"
        },
        {
            "last_affected":  "1.2"
        },
        {
            "introduced":  "1.3"
        },
        {
            "last_affected":  "1.3"
        },
        {
            "introduced":  "1.4"
        },
        {
            "last_affected":  "1.4"
        },
        {
            "introduced":  "1.5"
        },
        {
            "last_affected":  "1.5"
        },
        {
            "introduced":  "1.9"
        },
        {
            "last_affected":  "1.9"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

1.*

1.0

1.1

1.2

1.3

1.4

1.5

1.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110694.json"