Read the docs
TI-2026-36914 Aliases CVE-2026-50144

ncnn: Out-of-bounds heap write in ParamDict::load_param via unchecked negative parameter id

Priority HIGH 66CWE-129Published · Updated

Key facts

Attack vector
Local
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

ncnn is a high-performance neural network inference framework optimized for the mobile platform. In commit e54f7b1f88434e1d844ea0551b880a1cfb079ce1 and earlier, ncnn allows an out-of-bounds heap write in ncnn::ParamDict::load_param() when Net::load_param() loads a malicious .param model file because the parsed parameter id is checked only against id >= NCNN_MAX_PARAM_COUNT, allowing a negative id to index before the params[NCNN_MAX_PARAM_COUNT] array. This vulnerability is fixed by commit 5a0288f255daa6c3294f77109f67718e434ec020.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00161 5th percentileScored 2026-11-07
Fix Fixed ncnn (Tencent): 5a0288f255daa6c3294f77109f67718e434ec020

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Tencentncnnbefore 5a0288f255daa6c3294f77109f67718e434ec020; up to 202605265a0288f255daa6c3294f77109f67718e434ec020Patch availableCNA
  • ncnn VendorTencent Affected before 5a0288f255daa6c3294f77109f67718e434ec020; up to 20260526 Fixed in 5a0288f255daa6c3294f77109f67718e434ec020 Patch available CNA

Remediation

  • Fix · CNA ncnn (Tencent) Fixed in 5a0288f255daa6c3294f77109f67718e434ec020

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-50144

References

Other 2

  • TI-2023-14243 vConsole v3.15.0 was discovered to contain a prototype pollution due to incorrect key and… CVSS 3.1CRITICAL 9.8
  • TI-2026-23690 WeKnora: Remote Code Execution (RCE) via Command Injection in MCP Stdio Configuration Validation CVSS 3.1CRITICAL 10.0
  • TI-2026-23689 WeKnora: Remote Code Execution via SQL Injection Bypass in AI Database Query Tool CVSS 3.1CRITICAL 10.0
  • TI-2026-18215 WeKnora has Command Injection in MCP stdio test CVSS 3.1CRITICAL 10.0
  • TI-2026-18214 WeKnora vulnerable to SQL Injection CVSS 3.1CRITICAL 9.8
  • TI-2026-23684 WeKnora: Broken Access Control in Tenant Management CVSS 3.1HIGH 8.8
See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences