A buffer overflow occurs in the function SafeTensorItem::CreateBuffer within the Safetensors Weight Loading component of ztxz16 fastllm. The overflow is triggered by manipulating the data_offsets argument and can corrupt memory, potentially leading to denial of service or more severe exploitation if an attacker can inject code. The weakness is identified as a classic out‑of‑bounds write.

The affected product is ztxz16 fastllm, versions up to and including 1.8.2. No other products are mentioned in the CNA data.

The CVSS score of 5.3 indicates medium severity. The EPSS value is not reported, however an exploit has already been published and can be launched remotely, indicating that the vulnerability is reachable without insider access. The issue is not yet listed in the CISA KEV catalog, but the presence of a public exploit suggests that attackers may target it in the near term.