CVE-2026-110695Medium· 6.3▾ TwilightPoC availableA vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offs…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 34.7 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 16.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
Exploit / PoC code exists
0.4%
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116502Medium· 4.4turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write
CVE-2016-15060High· 8.3A vulnerability was found in PCMan FTP Server up to 2.0.7
CVE-2022-3628Medium· 6.6A buffer overflow flaw was found in the Linux kernel Broadcom Full MAC Wi-Fi driver
CVE-2025-11653High· 8.8A vulnerability was determined in UTT HiPER 2620G up to 3.1.4
CVE-2025-12322High· 8.8A flaw has been found in Tenda CH22 1.0.0.1
CVE-2025-12240High· 8.8A security vulnerability has been detected in TOTOLINK A3300R 17.0.0cu.557_B20221024