Heap Corruption in IMatrixCollector Load Method of Diffusion Model Library
CVE-2026-70659

7.8HIGH

Key Information:

Vendor

Leejet

Status
Stable-diffusion.cpp
Vendor
CVE Published:
5 November 2026

What is CVE-2026-70659?

A vulnerability in the IMatrixCollector::load_imatrix function of the stable-diffusion.cpp library allows for heap corruption due to improper handling of values and counts vectors. When an untrusted .imatrix file is loaded, the function can allow an accumulation loop to overwrite heap memory with attacker-controlled values, potentially leading to a crash or arbitrary code execution. This issue has been addressed in the latest version of the library.

Affected Version(s)

stable-diffusion.cpp < master-763-4fcc6fe

References

https://github.com/leejet/stable-diffusion.cpp/security/a...
x_refsource_CONFIRM
https://github.com/leejet/stable-diffusion.cpp/pull/1750
x_refsource_MISC
https://github.com/leejet/stable-diffusion.cpp/commit/4fc...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.