turboderp CVE debriefs

CVE-2026-110695

A buffer overflow vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2, specifically in the function STFile.get_tensor of the file exllamav2/stloader.py of the component Safetensors Tensor Loader. The vulnerability is caused by manipulation of the argument data_offsets, and the attack can be carried out remotely. The exploit is now public and may be used. The project was informed of the problem e [truncated]