CVE-2026-75090

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-75090

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75090.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-75090

Published

2026-08-18T01:15:14.559Z

Modified

2026-08-20T03:30:15.851355416Z

Severity

2.1 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds

Details

A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convertgguftohftokenizer of the file mistralrs-core/src/gguf/gguftokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eostokenid/bostokenid/unknowntoken_id results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolve this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Upgrading the affected component is recommended.

Database specific

{
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "0.8.1"
                },
                {
                    "last_affected": "0.8.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        }
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/75xxx/CVE-2026-75090.json",
    "cwe_ids": [
        "CWE-119",
        "CWE-125"
    ]
}

References

Affected packages

Git / github.com/ericlbuehler/mistral.rs

Affected ranges

Type

GIT

Repo

https://github.com/ericlbuehler/mistral.rs

Events

Introduced

962112d18ea5729fe7acaae5085ce54c2fb66dab

Fixed

cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e

Fixed

8744ceb4fe5b5a89f40065259a723dca01deb5c1

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0.8.0"
        },
        {
            "last_affected": "0.8.0"
        },
        {
            "introduced": "0.8.2"
        },
        {
            "last_affected": "0.8.2"
        },
        {
            "introduced": "0.8.3"
        },
        {
            "last_affected": "0.8.3"
        },
        {
            "introduced": "0.8.4"
        },
        {
            "last_affected": "0.8.4"
        },
        {
            "introduced": "0.8.5"
        },
        {
            "last_affected": "0.8.5"
        },
        {
            "introduced": "0.8.6"
        },
        {
            "last_affected": "0.8.6"
        },
        {
            "introduced": "0.8.7"
        },
        {
            "last_affected": "0.8.7"
        },
        {
            "introduced": "0.8.8"
        },
        {
            "last_affected": "0.8.8"
        },
        {
            "introduced": "0.8.9"
        },
        {
            "last_affected": "0.8.9"
        },
        {
            "introduced": "0.8.10"
        },
        {
            "last_affected": "0.8.10"
        },
        {
            "introduced": "0.8.11"
        },
        {
            "last_affected": "0.8.11"
        },
        {
            "introduced": "0.8.12"
        },
        {
            "last_affected": "0.8.12"
        },
        {
            "introduced": "0.8.13"
        },
        {
            "last_affected": "0.8.13"
        },
        {
            "introduced": "0.8.14"
        },
        {
            "last_affected": "0.8.14"
        },
        {
            "introduced": "0.8.15"
        },
        {
            "last_affected": "0.8.15"
        },
        {
            "introduced": "0.8.16"
        },
        {
            "last_affected": "0.8.16"
        },
        {
            "introduced": "0.8.17"
        },
        {
            "last_affected": "0.8.17"
        },
        {
            "introduced": "0.8.18"
        },
        {
            "last_affected": "0.8.18"
        },
        {
            "introduced": "0.8.19"
        },
        {
            "last_affected": "0.8.19"
        },
        {
            "introduced": "0.8.20"
        },
        {
            "last_affected": "0.8.20"
        },
        {
            "introduced": "0.8.21"
        },
        {
            "last_affected": "0.8.21"
        },
        {
            "introduced": "0.8.22"
        },
        {
            "last_affected": "0.8.22"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*

0.8.0

0.8.10

0.8.11

0.8.12

0.8.13

0.8.14

0.8.15

0.8.16

0.8.17

0.8.18

0.8.19

0.8.2

0.8.20

0.8.21

0.8.22

0.8.3

0.8.4

0.8.5

0.8.6

0.8.7

0.8.8

0.8.9

v0.*

v0.8.0

v0.8.10

v0.8.11

v0.8.12

v0.8.13

v0.8.14

v0.8.15

v0.8.16

v0.8.17

v0.8.18

v0.8.19

v0.8.2

v0.8.20

v0.8.21

v0.8.22

v0.8.3

v0.8.4

v0.8.4-rc10

v0.8.4-rc11

v0.8.4-rc12

v0.8.4-rc13

v0.8.4-rc4

v0.8.4-rc7

v0.8.4-rc9

v0.8.5

v0.8.6

v0.8.7

v0.8.8

v0.8.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-75090.json"