{"id":"CVE-2026-124996","published":"2026-11-09T22:18:39.680","lastModified":"2026-11-09T22:18:39.830","description":"A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid causes out-of-bounds read. Remote exploitation of the attack is possible. Upgrading to version 1.6.4 is sufficient to resolve this issue. Patch name: c9a57ae832a3035e264e0a412e1daf4ebb699b98. Upgrading the affected component is recommended.","cvssScore":6.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cwes":["CWE-119","CWE-125"],"vendors":[],"products":[],"references":[{"url":"https://github.com/turboderp-org/exllamav3/","tags":[]},{"url":"https://github.com/turboderp-org/exllamav3/commit/c9a57ae832a3035e264e0a412e1daf4ebb699b98","tags":[]},{"url":"https://github.com/turboderp-org/exllamav3/issues/526","tags":[]},{"url":"https://github.com/turboderp-org/exllamav3/releases/tag/v1.6.4","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-124996","tags":[]},{"url":"https://vuldb.com/submit/1040627","tags":[]},{"url":"https://vuldb.com/vuln/433166","tags":[]},{"url":"https://vuldb.com/vuln/433166/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/turboderp-org/exllamav3/","tags":[]},{"url":"https://github.com/turboderp-org/exllamav3/commit/c9a57ae832a3035e264e0a412e1daf4ebb699b98","tags":[]},{"url":"https://github.com/turboderp-org/exllamav3/issues/526","tags":[]},{"url":"https://github.com/turboderp-org/exllamav3/releases/tag/v1.6.4","tags":[]}],"hasPoc":true,"ai":null}