Description


A vulnerability was detected in Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4. Affected is the function create_striped_mat_to_gpu of the file smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu of the component FFN GPU-split Loader. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The pull request to fix this issue awaits acceptance.

Related CPE's


Could not find any relations

Weaknesses



CWE-119CWE-125

CVSS impact metrics


CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

5.3 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-13T03:16:40.760Z

11 hours ago

Last modified

2026-10-13T14:17:24.403Z

36 minutes ago