CVE-2026-110694: OAID Tengine tmfile Model Loader tm2_serializer.c get_tm_file_model out-of-bounds
A vulnerability has been found in OAID Tengine up to 1.12.0. This vulnerability affects the function gettmfilemodel of the file source/serializer/tmfile/tm2serializer.c of the component tmfile Model Loader. Such manipulation of the argument offsetroot leads to out-of-bounds read. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What conditions are required to exploit this issue?
An attacker must be able to cause the tmfile Model Loader to process a model file with a manipulated offset_root argument. The attack can be launched remotely and requires user interaction, but no attacker privileges are required.
Which deployments are potentially affected?
OAID Tengine versions up to and including 1.12.0 are identified as affected. Any deployment that loads tmfile models from remotely supplied or user-selected files should be prioritized for review.
Is public exploit information available?
Yes. The exploit has been publicly disclosed and may be used.
What can be done before a fix is available?
Restrict tmfile model loading to trusted, validated model sources and prevent untrusted users or remote inputs from supplying model files. The available information states that the project was notified through an issue report but had not responded.