VU#369611: ExLlamaV3 contains Denial of Service vulnerability via insufficient bounds checking on kernel dispatch index

Kurzinfo

Metadaten

Original (extern): Link oeffnen
Veroeffentlicht: 2026-09-11 20:11 UTC
Importiert: 2026-10-13 18:47 UTC
Quelle-ID: certcc_vuln
uid_hash: 8559c113ce2123358199d4aee74868fe2536ea3ba2bd7fe0802e61fd2588a17c

CERT/CC Vulnerability Notes

Inhalt

Overview

An out-of-bounds (OOB) memory access vulnerability involving unchecked array indexing has been identified in the exllamav3_ext compute unified device architecture (CUDA) extension. Successful exploitation can lead to an immediate denial of service or application instability. This vulnerability is tracked as CVE-2026-84286.

Description

An OOB memory access vulnerability exists in the exllamav3_ext module due to insufficient input validation.

When the kernel parameter K is set to 0 in a crafted input, the extension generates a negative array index, resulting in a CUDA illegal memory access.s. The root cause is a missing bounds check in the kernel-table dispatch process. The checkpoint-derived block index (cbi) is used to access a fixed 24-entry array without confirming that either K or cbi fall within safe limits.

Impact

Primary impacts include Denial of Service (DoS) through process crashes and potential unstable execution states within applications utilizing the library.

Solution

The vendor has addressed this vulnerability in the main repository. Users are advised to update their installations or apply the fix from the merged pull request: https://github.com/turboderp-org/exllamav3/pull/310.

Supply chain

Downstream projects utilizing this library are indirectly exposed to this vulnerability. According to the ExLlamaV3 Dependency Graph, there are 49 total dependencies currently tracking this repository. Notable downstream projects directly affected by this supply chain link include: UnstableLlama / ezexl3 and Ednaordinary / MawDiscord

Developers and maintainers of these dependent repositories are strongly encouraged to rebuild their packages against the patched version of exllamav3_ext.

Acknowledgements

The CERT Coordination Center (CERT/CC) thanks Nathan Keys (professor-moody) for discovering and responsibly reporting this vulnerability.

This AI-assisted vulnerability note was prepared by Laurie Tyzenhaus.

Vendor Information

    One or more vendors are listed for this advisory. Please reference the full report for more information.

Other Information

CVE IDs:

CVE-2026-84286

Date Public:

2026-09-11

Date First Published: 2026-09-11

Date Last Updated: 2026-09-11 20:11 UTC

Document Revision: 1

About vulnerability notes

Provide a vendor statement

Verknuepfte CVEs

CVE-ID	Severity (Quelle)	CVSS (Quelle)	Severity (CVE.org)	CVSS (CVE.org)	EPSS	EPSS-Pctl	Veroeffentlicht (CVE.org)
CVE-2026-84286

Quellen-Details

Bezeichnung	Name	Kategorie	Tags	Zielgruppe	Sprache	Feed-URL
CERT/CC Vulnerability Notes	certcc_vuln	threat_intel		-	de	https://www.kb.cert.org/vuls/atomfeed/

Zurueck zur Eintrags-Liste