CVE-2026-110694

Deferred Deferred - Pending Action

Out-of-Bounds Read in OAID Tengine

Publication date: 2026-10-14

Last updated on: 2026-10-15

Assigner: VulDB

Description

A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function get_tm_file_model of the file source/serializer/tmfile/tm2_serializer.c of the component tmfile Model Loader. Such manipulation of the argument offset_root leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-15

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110694

Affected Vendors & Products

Vendor	Product	Version / Range
OAID	Tengine	1.0
OAID	Tengine	1.1
OAID	Tengine	1.2
OAID	Tengine	1.3
OAID	Tengine	1.4
OAID	Tengine	1.5
OAID	Tengine	1.6
OAID	Tengine	1.7
OAID	Tengine	1.8
OAID	Tengine	1.9
OAID	Tengine	1.10
OAID	Tengine	1.11
OAID	Tengine	1.12.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds read issue in OAID Tengine up to version 1.12.0. It occurs in the function get_tm_file_model within the tmfile Model Loader component. The problem is caused by improper handling of the offset_root argument, which can be manipulated to read memory outside the intended bounds. The vulnerability can be exploited remotely and has been publicly disclosed.

Detection Guidance

The provided CVE data does not include specific detection methods or commands for identifying this vulnerability on a network or system. The vulnerability involves an out-of-bounds read in OAID Tengine up to version 1.12.0, but no details are given about detection techniques.

Impact Analysis

An attacker could exploit this vulnerability to read sensitive data from memory, potentially leading to information disclosure. This might include credentials, configuration details, or other sensitive information processed by the application. The impact depends on the application's use of the affected component.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if it results in unauthorized access to personal or health data. GDPR requires protection of personal data, while HIPAA mandates safeguards for protected health information. A breach could result in legal penalties or fines.

Mitigation Strategies

Immediately update OAID Tengine to the latest version beyond 1.12.0. If no update is available, consider disabling the tmfile Model Loader component or restricting network access to the vulnerable function get_tm_file_model.

Hi! I’m here to help you understand CVE-2026-110694. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70