CVE-2026-112108 Details
Description
A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. This impacts the function GGUFBuffer::ReadString of the file third_party/gguf/gguf.cpp of the component String Parsing. This manipulation of the argument len causes buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
A heap buffer overflow vulnerability has been identified in ztxz16 fastllm versions through 0.1.8.2. The issue arises in the GGUFBuffer::ReadString function within third_party/gguf/gguf.cpp, where the length of a string is read from a file and used to allocate a buffer. This allocation is vulnerable to integer wraparound, allowing an attacker to cause a buffer overflow. The vulnerability can be exploited remotely by uploading a crafted GGUF file, leading to heap corruption and a crash of the application.
The vulnerability can be fixed by validating the length of the string before allocating the buffer, ensuring it does not exceed the remaining file size and is capped below a certain threshold.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/user-attachments/files/33027563/poc.zip | [email protected] | Broken LinkExploit |
| https://github.com/ztxz16/fastllm/ | [email protected] | Source CodeVendor |
| https://github.com/ztxz16/fastllm/issues/759 | [email protected] | ExploitIssue TrackingTechnical AnalysisVendor |
| https://vuldb.com/cve/CVE-2026-112108 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1013191 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/422102 | [email protected] | Content Wall |
| https://vuldb.com/vuln/422102/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-120 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ztxz16 fastllm | <= 0.1.8.2 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 22, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |