A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. The function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split Loader has an out-of-bounds read vulnerability. The attack needs to be approached locally. The exploit is now public and may be used.
CVE-2026-108955 debrief based on the supplied source corpus. The CVE record was published on 2026-10-13T01:45:17.192Z and has not been modified since then. This medium-severity vulnerability in Tiiny-AI PowerInfer's gguf_init_from_file function requires local access for exploitation. Defenders should assess exposure, prioritize verification, and consider compensating controls. The product's rolling releas [truncated]