CVE-2026-112108

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-112108

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112108.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-112108

Published

2026-10-19T11:15:20Z

Modified

2026-10-20T02:46:03Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

ztxz16 fastllm String Parsing gguf.cpp ReadString buffer overflow

Details

A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Database specific

{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-119",
        "CWE-120"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/112xxx/CVE-2026-112108.json",
    "unresolved_ranges":  [
        {
            "extracted_events":  [
                {
                    "introduced":  "0.1.8.1"
                },
                {
                    "last_affected":  "0.1.8.1"
                }
            ],
            "source":  "AFFECTED_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/ztxz16/fastllm

Affected ranges

Type

GIT

Repo

https://github.com/ztxz16/fastllm

Events

Introduced

93111548c5e0802ed942dea71837229691d95f0e

Last Affected

7dab735a78bf0088a3bbb90fbc99c1e459da949a

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0.1.8.0"
        },
        {
            "last_affected":  "0.1.8.0"
        },
        {
            "introduced":  "0.1.8.2"
        },
        {
            "last_affected":  "0.1.8.2"
        }
    ],
    "source":  "AFFECTED_FIELD"
}

Affected versions

0.*

0.1.8.0

0.1.8.2

v0.*

v0.1.8.0

v0.1.8.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-112108.json"