AIKIDO-2026-546421

TL;DR

Faiss reads serialized index files in its index deserialization paths and uses attacker-controlled header fields, sizes, and offsets without fully validating them. Loading a crafted index can trigger integer-overflow-driven undersized allocations followed by out-of-bounds reads and writes, null pointer dereferences, unbounded recursion, and excessive memory or CPU consumption. Before the fix these malformed inputs could corrupt heap memory or crash the process while an index is being loaded. The release adds overflow-checked size arithmetic, bounds and null validation for reconstruction and stored codes, and recursion and allocation limits when reading indexes.