CVE-2026-112108

Name of the Vulnerable Software and Affected Versions ztxz16 fastllm versions prior to 0.1.8.3

Description A buffer overflow occurs during string parsing when the len argument is manipulated. This issue is located within the GGUFBuffer::ReadString() function in the third party/gguf/gguf.cpp file and can be triggered remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary mitigation, restrict the use of the GGUFBuffer::ReadString() function.