CVE-2026-112108

MediumCVSS 6.3

Published: 19/10/2026(UTC)Updated: 22/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.43%

36th percentile - higher than 36% of all known CVEs

Summary

In fastllm up to 0.1.8.2, the GGUFBuffer::ReadString function in gguf.cpp mishandles the len argument, causing a buffer overflow. The attack can be initiated remotely and the exploit has been publicly disclosed.

Risk Assessment

A buffer overflow could crash the application or allow arbitrary code execution when processing a malicious GGUF file. The project has not responded, so the risk remains unpatched.

Recommendation

Avoid processing untrusted GGUF files until a fix is released. Track the fastllm repository and apply the update as soon as it becomes available.

Other vulnerabilities in fastllm

CVE-2026-112107Medium
In fastllm up to 1.8.2, the SafeTensorItem::CreateBuffer function in src/model.cpp mishandles the data_offsets argument, causing a buffer overflow. The attack can be initiated remotely and the exploit is publicly available.

Original NVD description (English source)

A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS