CVE-2026-85670 | Hugging Face tokenizers up to 0.23.2 BpeBuilder model.rs BpeBuilder::build buffer overflow

A vulnerability was found in Hugging Face tokenizers up to 0.23.2 and classified as problematic. This impacts the function BpeBuilder::build of the file tokenizers/src/models/bpe/model.rs of the component BpeBuilder. Executing a manipulation can lead to buffer overflow.

This vulnerability is handled as CVE-2026-85670. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More