Description
A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-10-19
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Update
AI Analysis

Impact

The vulnerability is an out‑of‑bounds read in the matmul_transb function of the MatMul module in Tencent ncnn. During matrix multiplication the function reads beyond the allocated buffer, allowing a remote attacker to obtain arbitrary memory contents from the process space. The flaw does not provide direct code execution but can leak sensitive data such as keys, credentials, or other confidential information stored in memory.

Affected Systems

All releases of Tencent ncnn with the commit hash 44b02dabdc97499281a4692ebd65bad73dcf8b6 or earlier are affected. This includes every operating system or deployment environment that uses this version of the library.

Risk and Exploitability

The CVSS score of 5.3 classifies this as a medium severity vulnerability. The EPSS score is not available, and it is not listed in the CISA KEV catalog. The attack can be launched remotely by sending crafted input to a component that utilizes matmul_transb, and public exploits are available. The risk is moderate, with the potential for significant data exposure if the library processes sensitive data.

Generated by OpenCVE AI on October 19, 2026 at 04:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade ncnn to a version released after commit 44b02dabdc97499281a4692ebd65bad73dcf8b6, which removes the out‑of‑bounds read.
  • If an upgrade is not immediately possible, avoid using the matmul_transb layer with untrusted input data or replace it with a custom implementation that includes explicit bounds checks before accessing memory.
  • If patching or code changes are infeasible, run the application in a sandboxed environment with memory protection mechanisms such as ASLR and stack canaries enabled to reduce the likelihood that leaked data can be retrieved.

Generated by OpenCVE AI on October 19, 2026 at 04:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 19 Oct 2026 03:30:00 +0000

Type Values Removed Values Added
Description A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Title Tencent ncnn MatMul matmul.cpp matmul_transb out-of-bounds
First Time appeared Tencent
Tencent ncnn
Weaknesses CWE-119
CWE-125
CPEs cpe:2.3:a:tencent:ncnn:*:*:*:*:*:*:*:*
Vendors & Products Tencent
Tencent ncnn
References
Metrics cvssV2_0

{'score': 7.5, 'vector': 'AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:C'}

cvssV3_0

{'score': 6.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV3_1

{'score': 6.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Tencent Ncnn
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-10-19T03:15:18.986Z

Reserved: 2026-10-18T13:41:43.955Z

Link: CVE-2026-112073

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-19T04:17:08.707

Modified: 2026-10-19T04:17:08.707

Link: CVE-2026-112073

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-19T05:00:12Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-125

    Out-of-bounds Read