{"id":"CVE-2026-1260","aliases":["EUVD-2026-3802","GHSA-38vq-g6vr-w8wf","OESA-2026-3915","OESA-2026-3916","OESA-2026-3917","OESA-2026-4045","PYSEC-2026-1909"],"status":"published","title":"Invalid Memory Access in Sentencepiece,","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","severity":{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00174,"percentile":0.06933,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119"],"published":"2026-01-22T17:06:17Z","modified":"2026-10-28T02:30:23Z","fixes":[{"ecosystem":"PyPI","package":"sentencepiece","fixed_in":["0.2.1"],"sources":["ghsa","osv"]},{"ecosystem":"openEuler:24.03-LTS-SP3","package":"sentencepiece","fixed_in":["0.1.98-2.oe2403sp3"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"sentencepiece","fixed_in":["0.1.92-7.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP1","package":"sentencepiece","fixed_in":["0.1.98-2.oe2403sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS-SP4","package":"sentencepiece","fixed_in":["0.1.98-2.oe2403sp4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1"}]}],"versions":["0.0.0","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.9","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.81","0.1.82","0.1.83","0.1.85","0.1.86","0.1.90","0.1.91","0.1.92","0.1.94","0.1.95","0.1.96","0.1.97","0.1.98","0.1.99","0.2.0"]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP3","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.98-2.oe2403sp3"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.92-7.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP1","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.98-2.oe2403sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS-SP4","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.98-2.oe2403sp4"}]}]},{"source":"osv","ecosystem":"PyPI","package":"sentencepiece","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.1"}]}],"versions":["0.0.0","0.0.2","0.0.3","0.0.4","0.0.5","0.0.6","0.0.7","0.0.9","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8","0.1.81","0.1.82","0.1.83","0.1.85","0.1.86","0.1.90","0.1.91","0.1.92","0.1.94","0.1.95","0.1.96","0.1.97","0.1.98","0.1.99","0.2.0"]}],"products":[{"vendor":"google","product":"sentencepiece"},{"vendor":"red hat","product":"red hat ai inference server"},{"vendor":"red hat","product":"red hat enterprise linux ai (rhel ai) 3"},{"vendor":"red hat","product":"red hat openshift ai (rhoai)"},{"vendor":"red hat","product":"red hat openshift ai 2.25"},{"vendor":"red hat","product":"red hat openshift ai 3.3"}],"references":[{"url":"https://github.com/google/sentencepiece/releases/tag/v0.2.1","tags":["Product","Release Notes","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-1260","tags":["vdb-entry","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2432079","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-1260.json","tags":["x_sadp-csaf-vex","web"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3782","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:3713","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1260","tags":["advisory"]},{"url":"https://github.com/google/sentencepiece/commit/d856b67fdb3492e035489abf9b3aaf486144b2c0","tags":["web"]},{"url":"https://github.com/advisories/GHSA-38vq-g6vr-w8wf","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/1xxx/CVE-2026-1260.json","tags":["advisory"]},{"url":"https://github.com/google/sentencepiece","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3915","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3916","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3917","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4045","tags":["advisory"]},{"url":"https://pypi.org/project/sentencepiece","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-1260","title":"Invalid Memory Access in Sentencepiece,","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-01-22T17:06:17.34Z","modified":"2026-07-15T01:22:12.927Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-119","CWE-119"],"updated_at":"2026-11-02T14:20:01.271368Z"}],"euvd":[{"id":"EUVD-2026-3802","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-01-22T17:06:17Z","modified":"2026-07-15T01:22:12Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T18:19:55.318488Z"}],"ghsa":[{"id":"GHSA-38vq-g6vr-w8wf","title":"Sentencepiece has a a heap overflow issue","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-01-22T18:30:39Z","modified":"2026-01-22T20:28:41Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:39:19.525691Z"}],"nvd":[{"id":"CVE-2026-1260","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-01-22T17:16:30.643Z","modified":"2026-07-15T02:18:13.77Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:12:04.423757Z"}],"osv":[{"id":"CVE-2026-1260","title":"Invalid Memory Access in Sentencepiece,","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-01-22T17:06:17.34Z","modified":"2026-10-28T02:30:23.534882141Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:44:57.354194Z"},{"id":"GHSA-38vq-g6vr-w8wf","title":"Sentencepiece has a a heap overflow issue","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-01-22T18:30:39Z","modified":"2026-09-10T03:50:32.452851803Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T15:46:35.406455Z"},{"id":"OESA-2026-3915","title":"sentencepiece security update","description":"Security Fix(es):\n\nInvalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.(CVE-2026-1260)","status":"published","published":"2026-09-20T13:23:11Z","modified":"2026-09-20T13:30:25.206447747Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3916","title":"sentencepiece security update","description":"Security Fix(es):\n\nInvalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.(CVE-2026-1260)","status":"published","published":"2026-09-20T13:23:12Z","modified":"2026-09-20T13:30:25.617954413Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-3917","title":"sentencepiece security update","description":"Security Fix(es):\n\nInvalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.(CVE-2026-1260)","status":"published","published":"2026-09-20T13:23:12Z","modified":"2026-09-20T13:30:26.114821626Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"OESA-2026-4045","title":"sentencepiece security update","description":"Security Fix(es):\n\nInvalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.(CVE-2026-1260)","status":"published","published":"2026-09-25T01:27:38Z","modified":"2026-09-25T01:45:05.64479652Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:47.643553Z"},{"id":"PYSEC-2026-1909","title":"Sentencepiece has a a heap overflow issue","description":"Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.","status":"published","published":"2026-07-07T16:03:20.003357Z","modified":"2026-07-07T17:47:52.959634858Z","cvss":[{"version":"4.0","score":8.5,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T15:52:55.537808Z"}]}}