CTranslate2 before version 4.8.1 contains an out‑of‑bounds heap read in the binary model loader when it deserializes string fields that lack null terminators. This flaw, characterized by CWE‑125, can allow an attacker to cause the program to read memory past the intended buffer, potentially causing a crash or exposing contents of adjacent heap memory. The primary security consequence is the accidental disclosure of sensitive data stored on the heap, along with the risk of a denial of service through a forced crash.

The vulnerability affects OpenNMT CTranslate2 releases prior to 4.8.1. Systems running any older CTranslate2 binary that load user‑supplied or untrusted model files are susceptible. No broader vendor or product scope is indicated.

The CVSS score of 6.9 places the issue in the medium severity band, and the EPSS score is not available, suggesting limited publicly known exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is local or authenticated subject who can supply a crafted model file to the loader; the attacker need not possess elevated privileges, but must have the ability to influence the loader’s input. Successful exploitation can lead to memory disclosure or an intentional crash, though a remote code execution is not indicated.