CVE-2026-124996 | Turboderp-org ExLlamaV3 up to 1.6.3 hash-MoE routing routing.cu routing_sel_norm_kernel gate.tid2eid out-of-bounds (Issue 526)

A vulnerability was found in Turboderp-org ExLlamaV3 up to 1.6.3. It has been classified as critical. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid causes out-of-bounds read.

This vulnerability is registered as CVE-2026-124996. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More