CVE-2026-124996: Turboderp-org ExLlamaV3 hash-MoE routing routing.cu routing_sel_norm_kernel out-of-bounds
A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routingselnormkernel of the file exllamav3/exllamav3ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid causes out-of-bounds read. Remote exploitation of the attack is possible. Upgrading to version 1.6.4 is sufficient to resolve this issue. Patch name: c9a57ae832a3035e264e0a412e1daf4ebb699b98. Upgrading the affected component is recommended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Turboderp-org ExLlamaV3to a version that resolves this vulnerability.Fixed in 1.6.4Patch c9a57ae832a3035e264e0a412e1daf4ebb699b98
Event History
Frequently Asked Questions
Which deployments are affected?
ExLlamaV3 versions up to and including 1.6.3 are affected. Version 1.6.4 resolves the issue.
What must an attacker be able to do to exploit this issue?
The attacker needs to manipulate the gate.tid2eid argument used by the hash-MoE routing component. The issue is remotely exploitable and does not require privileges, though user interaction is indicated by the supplied severity vector.
What is the impact of successful exploitation?
Manipulating gate.tid2eid can trigger an out-of-bounds read in routing_sel_norm_kernel in exllamav3/exllamav3_ext/routing.cu. The supplied severity vector indicates potential low impact to confidentiality, integrity, and availability.
What should be done if an affected version is in use?
Upgrade ExLlamaV3 to version 1.6.4. The identified patch is c9a57ae832a3035e264e0a412e1daf4ebb699b98.