MEDIUM
OAID
CVE published 2026-10-14
CVE-2026-110694
A vulnerability was found in OAID Tengine up to 1.12.0 in the tmfile Model Loader component. The function get_tm_file_model in tm2_serializer.c is susceptible to an out-of-bounds read due to manipulation of the offset_root argument. This issue can be exploited remotely, potentially leading to information disclosure. The project was informed but has not yet responded. Defenders should assess exposure and v [truncated]