CVE-2026-84286

ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions...

CVE-2026-84286 OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table

ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions...

CVE-2026-84286

The exllamav3_ext CUDA extension is vulnerable to an out-of-bounds (OOB) memory access within the kernel-table dispatch process. The root cause is a missing bounds check where a model-supplied index—specifically the checkpoint-derived block index (cbi ) and kernel parameter K —is used to access a...

EUVD-2026-97575

ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions...