CVE-2026-75090: EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntokenid results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolve this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Upgrading the affected component is recommended.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
EricLBuehler Mistral.rs GGUF Tokenizerto a version that resolves this vulnerability.Fixed in 0.8.23Patch cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e
Event History
Frequently Asked Questions
Which versions are affected and what version fixes the issue?
Mistral.rs versions up to and including 0.8.22 are affected in the GGUF Tokenizer component. Version 0.8.23 resolves the issue; the identified fix is commit cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e.
What does an attacker need to do to exploit this vulnerability?
An attacker can remotely trigger an out-of-bounds read by manipulating the eos_token_id, bos_token_id, or unknown_token_id argument processed by convert_gguf_to_hf_tokenizer. The supplied data does not state any required privileges, while the CVSS vector indicates no privileges are required and user interaction is required.
What is the expected impact and is exploitation public?
The described impact is an out-of-bounds read that can cause a low availability impact. Public exploit code is available, increasing the practical urgency of updating affected deployments.