CVE-2026-112107: ztxz16 fastllm Safetensors Weight Loading model.cpp CreateBuffer buffer overflow
A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument dataoffsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Which deployments should be prioritized for review?
Review ztxz16 fastllm deployments running version 1.8.2 or earlier that load Safetensors weights. The affected code is in the Safetensors Weight Loading component.
What must occur for exploitation?
An attacker needs to manipulate the data_offsets argument processed by SafeTensorItem::CreateBuffer. The issue can be initiated remotely, but the severity vector indicates user interaction is required.
Is exploitation practical in the near term?
Yes. An exploit has been published and may be used, so exposed deployments should be treated as having publicly available exploit material.