Description
Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Google Sentencepiece
Default version status: unaffected
All versions prior to 0.2.1affected
References
- https://github.com/google/sentencepiece/releases/tag/v0.2.1 ↗
- https://access.redhat.com/security/cve/CVE-2026-1260 ↗
- https://bugzilla.redhat.com/show_bug.cgi?id=2432079 ↗
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1260.json ↗
- https://access.redhat.com/errata/RHSA-2026:3782 ↗
- https://access.redhat.com/errata/RHSA-2026:3713 ↗