01 Record

CVE-2026-72852

darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

HighPUBLISHEDCNA: VulnCheck

Base score8.5 CVSS v4.0CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

02 Description

darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow

Published

2026-08-20 18:19Z1 DAY AGO

Last updated

2026-08-20 18:19Z1 DAY AGO

Reserved

2026-08-10

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

High (CVSS 8.5)

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

82eecb89e944f9c0a456e5fcf6cd6865933e6c33e5054c92add186a719ab0e4b

VendorProductVersionsPlatforms

hank-aidarknet0 to 6.0—

github.comGitHub Issue #148https://github.com/hank-ai/darknet/issues/148issue-tracking
github.comUnchecked nweights computation at v6.0https://github.com/hank-ai/darknet/blob/v6.0/src-lib/convolutional_layer.cpp#L764technical-description
github.comUnchecked outputs computation feeding xcalloc at v6.0https://github.com/hank-ai/darknet/blob/v6.0/src-lib/convolutional_layer.cpp#L811technical-description
github.comGEMM dimensions re-derived with a different operand order at v6.0https://github.com/hank-ai/darknet/blob/v6.0/src-lib/convolutional_layer.cpp#L1457technical-description
github.comhttps://github.com/hank-ai/darknetproduct
www.vulncheck.comVulnCheck Advisory: darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflowhttps://www.vulncheck.com/advisories/darknet-integer-overflow-in-convolutional-layer-buffer-sizing-leads-to-heap-buffer-overflowthird-party-advisory