CVE-2026-110695: turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow
A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.gettensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument dataoffsets results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments are affected?
turboderp ExLlamaV2 versions up to and including 0.3.2 are affected in the Safetensors Tensor Loader component, specifically STFile.get_tensor in exllamav2/stloader.py.
What does an attacker need to do to exploit this issue?
An attacker needs to manipulate the data_offsets argument processed by STFile.get_tensor. The issue can be exploited remotely and requires user interaction, according to the supplied vector.
Is public exploit code available?
Yes. The exploit is public and may be used.
Is there a vendor response or patch available?
The project was notified early through an issue report but had not responded at the time of the report. No fixed version or mitigation is provided in the available data.