Approved changes feed: RSS · Atom
cpe:2.3:a:praat:praat:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Praat (536e681f-af16-5243-b864-113f2147bb0a) |
|---|---|
| Product | Praat (e16f32e2-8ace-5cf0-8a2f-19fbe555c577) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-110698 |
vulnerable | 2026-11-03 10:16:00.436044 |
Praat Model Loader whisper.cpp whisper_model_load out-of-bounds write
MEDIUM (6.3)
A security vulnerability has been detected in Praat up to 7.0.02. Affected is the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The identifier of the patch is a910d21a2705ef4cd16d91f29cdc8da1ab1a7221. To fix this issue, it is recommended to deploy a patch. The project maintainer confirms: "We did a quick fix (suggested fix 1) for Praat version 7.0.03, and scheduled a better fix (suggested fix 2)."
Published: 2026-10-14T21:45:09.762Z
Updated: 2026-10-20T02:15:11.452Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.