CVE-2026-124994 | Turboderp-org ExLlamaV3 up to 1.6.3 NGramEmbedding ngram.cu ngram_dequant head_bias out-of-bounds (Issue 525)

A vulnerability was found in Turboderp-org ExLlamaV3 up to 1.6.3 and classified as problematic. The affected element is the function ngram_dequant of the file exllamav3/exllamav3_ext/ngram.cu of the component NGramEmbedding. The manipulation of the argument head_bias results in out-of-bounds read.

This vulnerability is cataloged as CVE-2026-124994. The attack may be launched remotely. Furthermore, there is an exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More