Kakao CVE debriefs

CVE-2026-115801

A security flaw has been discovered in Kakao khaiii up to 0.4, specifically in the khaiii::nn::Linear::open function of the Linear.cpp file. This vulnerability results in an out-of-bounds read when manipulating the hidden_dim/class_num argument in the JSON config file. The attack requires local access, and an exploit has been publicly released. According to the vendor, khaiii treats the resource directory [truncated]