CVE-2026-122189

A flaw was found in ppl.nn. An out-of-bounds read vulnerability in the CUDA optimizer allows a remote attacker to cause a Denial of Service DoS or disclose sensitive memory contents by providing manipulated quantization parameters. When the application processes crafted inputs during quantization...

CVE-2026-122189 OpenPPL ppl.nn CUDA Optimizer opt_graph.cc InitQuantization out-of-bounds

A vulnerability has been found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5. The affected element is the function OptGraph::InitQuantization of the file src/ppl/nn/engines/cuda/optimizer/optgraph.cc of the component CUDA Optimizer. Such manipulation of the argument...