Description
stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and counts vectors for entries with the same tensor name but resizes them only when they are empty. An untrusted .imatrix file can provide a small nval for the first entry and a larger nval for a second entry with the same name, causing the accumulation loop to write attacker-controlled floating-point and integer values beyond both heap buffers. Loading the file through the --imat-in conversion path can corrupt the heap or crash the process before a model is required. This issue is fixed in master-763-4fcc6fe.
Published: 2026-11-05
Score: 7.8 High
EPSS: n/a
KEV: No
Impact: Denial of Service
Action: Apply Patch
AI Analysis

Impact

The vulnerability involves an out‑of‑bounds write to heap buffers during the loading of an .imatrix file. When an attacker supplies an untrusted file containing duplicate tensor names with differing size values, the accumulation loop writes beyond the bounds of the values and counts vectors. This corruption can lead to arbitrary heap corruption or a process crash before the diffusion model is initialized.

Affected Systems

The issue exists in stable‑diffusion.cpp releases from commit master‑742‑1a13107 up to and including master‑763‑4fcc6fe. Users employing these builds are susceptible.

Risk and Exploitability

The CVSS score is 7.8, indicating a moderate to high severity vulnerability. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be local or remote, depending on whether an attacker can supply the .imatrix file to the library, such as during model loading or through a user‑controlled input path. Successful exploitation would result in application denial of service or potential data integrity issues.

Generated by OpenCVE AI on November 5, 2026 at 16:36 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade stable‑diffusion.cpp to version master‑763‑4fcc6fe or later, which contains the fix.
  • Ensure that any loading of .imatrix files is performed only on trusted inputs, implementing strict validation of tensor names and size fields to prevent duplicate entries.
  • If an upgrade cannot be applied immediately, isolate the application from untrusted .imatrix files and restrict file access to privileged users only.

Generated by OpenCVE AI on November 5, 2026 at 16:36 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 05 Nov 2026 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Leejet
Leejet stable-diffusion.cpp
Vendors & Products Leejet
Leejet stable-diffusion.cpp

Thu, 05 Nov 2026 15:45:00 +0000

Type Values Removed Values Added
Description stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and counts vectors for entries with the same tensor name but resizes them only when they are empty. An untrusted .imatrix file can provide a small nval for the first entry and a larger nval for a second entry with the same name, causing the accumulation loop to write attacker-controlled floating-point and integer values beyond both heap buffers. Loading the file through the --imat-in conversion path can corrupt the heap or crash the process before a model is required. This issue is fixed in master-763-4fcc6fe.
Title stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name
Weaknesses CWE-1284
CWE-787
References
Metrics cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

Subscriptions

Leejet Stable-diffusion.cpp
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-11-05T15:26:33.019Z

Reserved: 2026-08-04T21:48:08.613Z

Link: CVE-2026-70659

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-11-05T16:17:48.047

Modified: 2026-11-05T16:17:48.047

Link: CVE-2026-70659

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-05T16:45:06Z

Weaknesses
  • CWE-1284

    Improper Validation of Specified Quantity in Input

  • CWE-787

    Out-of-bounds Write