Out-of-Bounds Read Vulnerability in Tiiny-AI PowerInfer GPU-split Loader
CVE-2026-108960

4.8MEDIUM

Key Information:

Vendor

Tiiny-ai

Status
Powerinfer
Vendor
CVE Published:
13 October 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-108960?

A vulnerability exists in the Tiiny-AI PowerInfer's FFN GPU-split Loader within the create_striped_mat_to_gpu function, located in the ggml-cuda.cu file. This flaw leads to out-of-bounds read conditions that could be exploited locally. Attackers can leverage this vulnerability, which is already public, to manipulate memory, potentially compromising the integrity of the application. The issue remains under review, with a pending pull request aimed at resolving the concern. As PowerInfer operates on a rolling release model, exact version details for fixes are not provided.

Affected Version(s)

PowerInfer 8bd56d69906c9d2dba4d3bf6899763401e01a9a4

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-108960 - Proof of Concept

References

https://vuldb.com/vuln/416779
vdb-entrytechnical-description
https://vuldb.com/vuln/416779/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-108960
third-party-advisory

CVSS V4

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Dem0 (VulDB User)
VulDB CNA Team
.