Threats affecting pkg:github/turboderp-org/exllamav3

CVE-2026-124996 is an out-of-bounds read vulnerability in Turboderp-org ExLlamaV3 versions 1.6.0 through 1.6.3. The flaw exists in the function routing_sel_norm_kernel within the hash-MoE routing component, caused by improper handling of the argument gate.tid2eid. Remote exploitation is possible. Upgrading to version 1.6.4 resolves the issue.

CVE-2026-124994 is a medium-severity vulnerability in Turboderp-org ExLlamaV3 versions 1.6.0 through 1.6.3. It involves an out-of-bounds read in the ngram_dequant function within the NGramEmbedding component, triggered by manipulation of the head_bias argument. The flaw can be exploited remotely, and public exploit code is available. Upgrading to version 1.6.4 resolves the issue.

CVE-2026-84286 is a critical out-of-bounds read vulnerability in Turboderp-org's ExLlamaV3 version 3. The EXL3 loader uses an untrusted model-supplied index to select a CUDA kernel without verifying bounds, allowing a malicious model to cause a crash or potentially achieve controlled indirect kernel dispatch under specific memory conditions.