CVE-2026-75090— EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 24
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| EricLBuehler | Mistral.rs | 0.8.0 | affected |
0.8.1 | affected | ||
0.8.2 | affected | ||
0.8.3 | affected | ||
0.8.4 | affected | ||
0.8.5 | affected | ||
0.8.6 | affected | ||
0.8.7 | affected | ||
| … +16 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-75090
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolve this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Upgrading the affected component is recommended.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| EricLBuehler | Mistral.rs | 0.8.0 | cpe:2.3:a:ericlbuehler:mistral.rs:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-75090
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-75090
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-75090 (2)
Vendor Advisories for CVE-2026-75090 (1)
Vendor Pages for CVE-2026-75090 (1)
IV. Related Vulnerabilities
Same weakness: CWE-125
- CVE-2026-62291
libheif: Heap out of bounds write in libheif uncompressed en - CVE-2026-62292
libheif: Out-of-bounds read in uncompressed unci tile range - CVE-2026-12632
Out-of-bounds read in Zephyr PTP message parsing from unvali - CVE-2026-50126
adaguc-server GeoJSON coordinate parser (CConvertGeoJSON.cpp - CVE-2026-75904
libmodplug <= 0.8.9.1 - Out-of-Bounds Read in pat_smplooped
V. Comments for CVE-2026-75090
No comments yet