Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2026-116502

turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulDB

Description

A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu of the component GPTQ Index Handler. Executing a manipulation of the argument g_idx can lead to out-of-bounds write. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

turboderp-org ExLlamaV2

  • 0.3.0affected
  • 0.3.1affected
  • 0.3.2affected

References