CVE-2026-124994

A security flaw exists in Turboderp-org ExLlamaV3 versions up to 1.6.3 . The vulnerability is located in the NGramEmbedding component, specifically within the ngram_dequant function of the file exllamav3/exllamav3_ext/ngram.cu. Manipulating the head_bias argument leads to an out-of-bounds read , ...

CVE-2026-124994: Turboderp-org ExLlamaV3: A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.3

A security flaw has been discovered in Turboderp-org ExLlamaV3 up to 1.6.3. The affected element is the function ngramdequant of the file exllamav3/exllamav3ext/ngram.cu of the component NGramEmbedding. The manipulation of the argument headbias results in out-of-bounds read. The attack may be...