EUVD-2026-72303

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nnmodules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument gidx leads to out-of-bounds read. The attack can be...

PT-2026-86659

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn modules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument g idx leads to out-of-bounds read. The attack can be...

CVE-2026-86288: Out-of-bounds Read

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nnmodules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument gidx leads to out-of-bounds read. The attack can be...

CVE-2026-53923 vLLM GGUF Kernels: int64_t to int truncation of tensor dimensions causes GPU buffer overflow

vLLM is an inference and serving engine for large language models LLMs. From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels csrc/quantization/gguf/ggufkernel.cu causes partial tensor processing. The output tensor is allocated at full size via...