CVE-2026-112073
MediumCVSS 6.3Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
A vulnerability was identified in Tencent ncnn in the matmul_transb function (src/layer/matmul.cpp) within the MatMul component. The manipulation leads to an out-of-bounds read. The exploit is publicly available and can be initiated remotely.
Risk Assessment
A remote attacker could trigger an out-of-bounds read, potentially leading to data leakage or application crash. The public availability of the exploit increases the attack risk.
Recommendation
Update ncnn to a patched version or restrict processing of untrusted input for MatMul operations. Monitor the project for patch announcements.
Other vulnerabilities in Tencent ncnn
Original NVD description (English source)
A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dcf8b6. Affected by this vulnerability is the function matmul_transb of the file src/layer/matmul.cpp of the component MatMul. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS