PowerInfer
PowerInfer is a high-performance inference framework for large language models that leverages sparse activation and hybrid CPU/GPU scheduling to accelerate local inference, and supports the GGUF model format.
Timeline (last 90 days)
CVE-2026-108955 is a tensor data offset overflow vulnerability in PowerInfer gguf_init_from_file.
The gguf-scan tool provides only partial coverage for the PowerInfer CVE-2026-108955 case: rule GG011 can only flag unaligned data offsets, and full bounds checking of the data area remains a known gap.
All Facts (2)
CVE-2026-108955 is a tensor data offset overflow vulnerability in PowerInfer gguf_init_from_file.
50%UnverifiedThe gguf-scan tool provides only partial coverage for the PowerInfer CVE-2026-108955 case: rule GG011 can only flag unaligned data offsets, and full bounds checking of the data area remains a known gap.
50%