CVE-2026-110698

Deferred Deferred - Pending Action

Out-of-Bounds Write in Praat Model Loader

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulDB

Description

A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a910d21a2705ef4cd16d91f29cdc8da1ab1a7221. To fix this issue, it is recommended to deploy a patch. The project maintainer confirms: "We did a quick fix (suggested fix 1) for Praat version 7.0.03, and scheduled a better fix (suggested fix 2)."

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-110698

EUVD

EUVD-2026-101708

Affected Vendors & Products

Vendor	Product	Version / Range
n/a	Praat	7.0.02

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out-of-bounds write issue in Praat versions up to 7.0.02. It occurs in the whisper_model_load function within the external/whispercpp/whisper.cpp file. The problem arises when the argument n_dims is manipulated, leading to memory corruption. The attack can be executed remotely.

Detection Guidance

This vulnerability affects Praat versions up to 7.0.02, specifically the whisper_model_load function in external/whispercpp/whisper.cpp. To detect it, check the installed version of Praat using 'praat --version' or inspect the source code for the affected file path. If the version is 7.0.02 or earlier, the system is vulnerable.

Impact Analysis

An attacker could exploit this flaw to execute arbitrary code or cause a denial of service by corrupting memory. Since the attack can be initiated remotely, systems running vulnerable Praat versions are at risk without proper patching.

Compliance Impact

This vulnerability involves an out-of-bounds write in Praat's model loader function, which could allow remote attackers to execute arbitrary code or cause denial-of-service conditions. Such vulnerabilities may lead to unauthorized data access, modification, or loss, potentially violating GDPR's data integrity and confidentiality requirements or HIPAA's safeguards for protected health information.

Mitigation Strategies

Update Praat to version 7.0.03 or later to apply the patch for the out-of-bounds write vulnerability in the whisper_model_load function.

Hi! I’m here to help you understand CVE-2026-110698. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70