PatchSiren

Praat CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Praat CVE published 2026-10-14

CVE-2026-110698

A security vulnerability has been detected in Praat up to 7.0.02, specifically in the function whisper_model_load of the file external/whispercpp/whisper.cpp of the component Model Loader. The manipulation of the argument n_dims leads to out-of-bounds write. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used.