Skip to content
OpenAdvisories
Medium · 4.4 CVE-2026-116502 EUVD-2026-110316GHSA-56qq-ww5r-ph3r

turboderp-org ExLlamaV2 GPTQ Index q_matrix.cu make_sequential out-of-bounds write

Published Oct 26, 2026 · Updated Nov 2, 2026 · Assigned by VulDB

Description

A flaw has been found in turboderp-org ExLlamaV2 up to 0.3.2. The impacted element is the function QMatrix::make_sequential of the file exllamav2/exllamav2_ext/cuda/q_matrix.cu of the component GPTQ Index Handler. Executing a manipulation of the argument g_idx can lead to out-of-bounds write. The attack needs to be launched locally. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

VendorProductAffectedFixed
turboderp-org ExLlamaV2 0.3.0, 0.3.1, 0.3.2 —

References