turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write
Impact
A flaw in turboderp-org ExLlamaV2 up to 0.3.2 allows a local attacker to cause an out-of-bounds write by manipulating the g_idx argument in the QMatrix::make_sequential function. The impact is uncertain. Local access is required.
Summarized by @cf/meta/llama-3.3-70b-instruct-fp8-fast. Verify details against the original sources.Affected packages
Affected products
Vendor version evidence. Product records are separate from automatic dependency matching.
turboderp-org · VulDB
ExLlamaV2
3 ranges
turboderp-org · VulDB
ExLlamaV2
Compare with this publisher’s ranges. This does not inspect your installation.
affected
0.3.0
0.3.1
0.3.2
Other versions: unknown
Product identifiers (CPE)
cpe:2.3:a:turboderp-org:exllamav2:*:*:*:*:*:*:*:*Original source description
A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu of the component GPTQ Index Handler. Executing a manipulation of the argument g_idx can lead to out-of-bounds write. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.
Inside the record
Evidence available
Describes the evidence in this view, not whether the product is safe.
Original records
CVE-2026-116502View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.
cve.new JSON →Underlying weaknesses
The source’s classification of what caused the vulnerability.
Contributing organizations · 1
Assigning organization
What changed
Follow changesLarge field values are marked as truncated previews. Original source snapshots remain retained.