{"ok":true,"trend":{"id":427850,"platform":"mastodon","region":"global","key":"🚨 ctranslate2 cve-2026-102566 & cve-2026-102567 the inference engine behind whisper & opennmt has two memory flaws in it","title":"🚨 CTranslate2 CVE-2026-102566 & CVE-2026-102567 The inference engine behind Whisper & OpenNMT has two memory flaws in it","url":"https://infosec.exchange/@threataft/117357408012737816","first_seen":"2026-09-30T01:56:04.192125Z","last_seen":"2026-09-30T01:56:04.192125Z","last_rank":8,"peak_rank":2,"last_volume":1,"peak_volume":1,"seen_count":1,"score":1.7821875,"category_hint":"cybersecurity","section":"technology","category":"cybersecurity","summary":"Security researchers have disclosed two vulnerabilities in CTranslate2, the machine learning inference engine used by Whisper and OpenNMT. CVE-2026-102566, rated CVSS 7.8, is a heap buffer overflow in the model loader that could allow arbitrary code execution, while CVE-2026-102567, rated 6.1, is an out-of-bounds read enabling memory disclosure or crashes. Developers running speech recognition or translation services are being urged to patch.","why":"CTranslate2 is widely deployed in AI speech and translation systems, so memory flaws that could enable code execution raise immediate security concerns.","tone":"neutral","entities":["CTranslate2","Whisper","OpenNMT","CVE-2026-102566","CVE-2026-102567"],"summarized_at":"2026-09-30T01:56:40.901508Z","meta":{"tag":"infosec","via":"scan","kind":"status","lang":"en","instance":"mastodon.social","tag_uses":1103},"nw":null,"promo":null,"kind":null,"importance":null,"hidden":false,"hide_reason":null,"judged_at":null,"title_en":"Two memory flaws found in CTranslate2 inference engine","section_name":"Technology","category_name":"Cybersecurity","timeline":[{"captured_at":"2026-09-30T01:56:04.192125Z","rank":2,"volume":1},{"captured_at":"2026-09-30T01:56:04.192125Z","rank":8,"volume":1}],"posts":[{"platform":"mastodon","url":"https://infosec.exchange/@threataft/117357408012737816","author":"threataft@infosec.exchange","title":null,"snippet":"🚨 CTranslate2 CVE-2026-102566 & CVE-2026-102567 The inference engine behind Whisper & OpenNMT has two memory flaws in its model loader: CVE-2026-102566 (CVSS 7.8) — heap buffer overflow → arbitrary code execution CVE-2026-102567 (CVSS 6.1) — OOB read → memory disclosure / crash…","posted_at":"2026-09-30T01:32:13Z","likes":1}],"elsewhere":[],"window":"7d"}}