CVE-2026-108960 in PowerInfer
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability was detected in <a href="/product/tiiny-ai:powerinfer">Tiiny-AI PowerInfer up to 8bd56d69906c9d2dba4d3bf6899763401e01a9a4</a>. Affected is the function <code>create_striped_mat_to_gpu</code> of the file <em>smallthinker/ggml/src/ggml-cuda/ggml-cuda.cu</em> of the component <em>FFN GPU-split Loader</em>. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The pull request to fix this issue awaits acceptance.
If you want to get best quality of vulnerability data, you may have to visit VulDB.