Vulnerability · Published Oct 14, 2026 · Assigned by VulDB

CVE-2026-110695turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow

Medium 6.3

In plain English

A medium-severity buffer overflow in ExLlamaV2 from turboderp. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.4%top 69.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. Affected is the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. Performing a manipulation of the argument data_offsets results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected products (as reported)

Vendor	Product	Versions
turboderp	ExLlamaV2	0.3.00.3.10.3.2

Weakness: CWE-120, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

References

VDB-419848 | turboderp ExLlamaV2 Safetensors Tensor Loader stloader.py STFile.get_tensor buffer overflow vdb-entry, technical-description
VDB-419848 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-110695 | CVE Analysis and Report third-party-advisory
Submit #1003958 | turboderp ExLlamaV2 0.3.2 (commit 6a2d8311) and master commit 7dc12af Heap-based Buffer Overflow third-party-advisory
https://github.com/turboderp-org/exllamav2/issues/820 issue-tracking
https://github.com/3em0/cve_repo/blob/main/2026/ExLlamaV2-0.3.2-Heap-Buffer-Overflow-in-the-safetensors-tensor-loader(STFile.get_tensor-stloader_read).md exploit