CVE-2026-112108
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/ggu
CVSS
6.3
Medio
EPSS
—
KEV
—
Exploit Today
0
0-100
Publicado: 19 oct 2026 · Última mod.: 19 oct 2026 · CWE-119 · CWE-120
Sin historial EPSS suficiente todavía.
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
- github.comhttps://github.com/user-attachments/files/33027563/poc.zip
- github.comhttps://github.com/ztxz16/fastllm/
- github.comhttps://github.com/ztxz16/fastllm/issues/759
- vuldb.comhttps://vuldb.com/cve/CVE-2026-112108
- vuldb.comhttps://vuldb.com/submit/1013191
- vuldb.comhttps://vuldb.com/vuln/422102
- vuldb.comhttps://vuldb.com/vuln/422102/cti
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-1123736.5 MED—
——0A security vulnerability has been detected in H3C Magic NX15 NX15V100R017. This impacts the function sub_416874 of the file /usr/bin/usrlist. Such manipulation leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.13hCVE-2025-556675.5 MED—
——0A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.16hCVE-2026-118296.5 MED—
——0IBM MQ could allow an authenticated attacker to cause a denial of service due to improper validation of offset values in MQOPEN requests.17hCVE-2026-118285.9 MED—
——0IBM MQ could allow a remote attacker with queue manager control or man-in-the-middle access on unencrypted channels to cause a denial of service in client applications using asynchronous message consumption due to improper validation of queue name length values.17hCVE-2026-1121076.3 MED—
——0A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.22hCVE-2026-1120945.5 MED7.1%
——2A security vulnerability has been detected in michaelrsweet mxml 4.0.5/4.0.6. This affects the function mxml_load_data of the file mxml-file.c. The manipulation leads to use after free. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.19h