CVE-2026-122189 | OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5 CUDA Optimizer opt_graph.cc InitQuantization per_channel/bit_width/tensor_max/tensor_min/scale out-of-bounds (Issue 975)

SecurityVulns
Yanac

A vulnerability was found in OpenPPL ppl.nn up to bb84dc9952809b3a5a0036858a3d9f68af1c83d5 and classified as critical. The affected element is the function OptGraph::InitQuantization of the file src/ppl/nn/engines/cuda/optimizer/opt_graph.cc of the component CUDA Optimizer. Such manipulation of the argument per_channel/bit_width/tensor_max/tensor_min/scale leads to out-of-bounds read.

This vulnerability is uniquely identified as CVE-2026-122189. The attack can be launched remotely. Moreover, an exploit is present.

This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More