Skip to content
OpenAdvisories

Vendor

turboderp-org

5 known vulnerabilities.

Products

ExLlamaV3 3 ExLlamaV2 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-84286

    OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table

    ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproduci…

    turboderp-org ExLlamaV3