CVE-2026-116502 — Vulnerability intelligence
—
Published:
- CVSS
- 4.8
- CISA KEV
- Not listed; not proof of no exploitation
Original source text (not a translation)
A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu of the component GPTQ Index Handler. Executing a manipulation of the argument g_idx can lead to out-of-bounds write. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.