CVE-2026-84286— OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table
Quick assessment
Affected
Turboderp-org ExLlamaV3
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ExLlamaV3 的 EXL3 加载器使用来自模型、未经信任的索引来选择 CUDA 内核，而在此之前未验证该索引是否在有效范围内。恶意模型可以迫使代码读取并调用越界函数指针，从而导致可重现的崩溃。在涉及特定主机内存布局的特定条件下，攻击者有可能利用此漏洞，在模型加载过程中实现受控的间接内核分发。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1059 · Command and Scripting InterpreterAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Turboderp-org | ExLlamaV3 | 3 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-84286
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
OOB Read/Write via Negative Array Index in exllamav3_ext Kernel Table
Source: CVE Program / CVE List V5
Vulnerability Description
ExLlamaV3’s EXL3 loader uses an untrusted, model-supplied index to select a CUDA kernel without first verifying that the index is within bounds. A malicious model can force the code to read and invoke an out‑of‑range function pointer, resulting in a reproducible crash. Under specific conditions involving certain host memory layouts, it may be possible for an attacker to exploit this vulnerability to achieve controlled indirect kernel dispatch during model load.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Turboderp-org | ExLlamaV3 | 3 | - |
|
II. Public POCs for CVE-2026-84286
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-84286
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-84286 (1)
Vendor Advisories for CVE-2026-84286 (1)
V. Comments for CVE-2026-84286
No comments yet