CVE-2026-70659

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-70659", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-08-04T21:48:08.613Z", "datePublished": "2026-11-05T15:26:33.019Z", "dateUpdated": "2026-11-09T16:51:47.923Z"}, "containers": {"cna": {"title": "stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name", "problemTypes": [{"descriptions": [{"cweId": "CWE-787", "lang": "en", "description": "CWE-787: Out-of-bounds Write", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-1284", "lang": "en", "description": "CWE-1284: Improper Validation of Specified Quantity in Input", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7"}, {"name": "https://github.com/leejet/stable-diffusion.cpp/pull/1750", "tags": ["x_refsource_MISC"], "url": "https://github.com/leejet/stable-diffusion.cpp/pull/1750"}, {"name": "https://github.com/leejet/stable-diffusion.cpp/commit/4fcc6fef10c6f686801c6e257b22cd6a3deb906b", "tags": ["x_refsource_MISC"], "url": "https://github.com/leejet/stable-diffusion.cpp/commit/4fcc6fef10c6f686801c6e257b22cd6a3deb906b"}, {"name": "https://github.com/leejet/stable-diffusion.cpp/releases/tag/master-763-4fcc6fe", "tags": ["x_refsource_MISC"], "url": "https://github.com/leejet/stable-diffusion.cpp/releases/tag/master-763-4fcc6fe"}], "affected": [{"vendor": "leejet", "product": "stable-diffusion.cpp", "versions": [{"version": "< master-763-4fcc6fe", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T15:26:33.019Z"}, "descriptions": [{"lang": "en", "value": "stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and counts vectors for entries with the same tensor name but resizes them only when they are empty. An untrusted .imatrix file can provide a small nval for the first entry and a larger nval for a second entry with the same name, causing the accumulation loop to write attacker-controlled floating-point and integer values beyond both heap buffers. Loading the file through the --imat-in conversion path can corrupt the heap or crash the process before a model is required. This issue is fixed in master-763-4fcc6fe."}], "source": {"advisory": "GHSA-6q7q-2v9c-x8m7", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-11-09T16:12:12.004034Z", "id": "CVE-2026-70659", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T16:51:47.923Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-70659", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-11-09T16:12:12.004034Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-09T16:12:13.108Z"}}], "cna": {"title": "stable-diffusion.cpp: Heap out-of-bounds write in the imatrix loader (`load_imatrix`) via a duplicate tensor name", "source": {"advisory": "GHSA-6q7q-2v9c-x8m7", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "leejet", "product": "stable-diffusion.cpp", "versions": [{"status": "affected", "version": "< master-763-4fcc6fe"}]}], "references": [{"url": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7", "name": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/leejet/stable-diffusion.cpp/pull/1750", "name": "https://github.com/leejet/stable-diffusion.cpp/pull/1750", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/leejet/stable-diffusion.cpp/commit/4fcc6fef10c6f686801c6e257b22cd6a3deb906b", "name": "https://github.com/leejet/stable-diffusion.cpp/commit/4fcc6fef10c6f686801c6e257b22cd6a3deb906b", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/leejet/stable-diffusion.cpp/releases/tag/master-763-4fcc6fe", "name": "https://github.com/leejet/stable-diffusion.cpp/releases/tag/master-763-4fcc6fe", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and counts vectors for entries with the same tensor name but resizes them only when they are empty. An untrusted .imatrix file can provide a small nval for the first entry and a larger nval for a second entry with the same name, causing the accumulation loop to write attacker-controlled floating-point and integer values beyond both heap buffers. Loading the file through the --imat-in conversion path can corrupt the heap or crash the process before a model is required. This issue is fixed in master-763-4fcc6fe."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "CWE-787: Out-of-bounds Write"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1284", "description": "CWE-1284: Improper Validation of Specified Quantity in Input"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-11-05T15:26:33.019Z"}}}, "cveMetadata": {"cveId": "CVE-2026-70659", "state": "PUBLISHED", "dateUpdated": "2026-11-09T16:51:47.923Z", "dateReserved": "2026-08-04T21:48:08.613Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-11-05T15:26:33.019Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "stable-diffusion.cpp", "vendor": "leejet", "versions": [{"status": "affected", "version": "< master-763-4fcc6fe"}]}], "source": "security-advisories@github.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "stable-diffusion.cpp is a pure C/C++ library for running diffusion model (Stable Diffusion, Flux, Wan, Qwen Image, Z-Image, and more) inference. From master-742-1a13107 until master-763-4fcc6fe, IMatrixCollector::load_imatrix in src/runtime/imatrix.cpp reuses the values and counts vectors for entries with the same tensor name but resizes them only when they are empty. An untrusted .imatrix file can provide a small nval for the first entry and a larger nval for a second entry with the same name, causing the accumulation loop to write attacker-controlled floating-point and integer values beyond both heap buffers. Loading the file through the --imat-in conversion path can corrupt the heap or crash the process before a model is required. This issue is fixed in master-763-4fcc6fe."}], "id": "CVE-2026-70659", "lastModified": "2026-11-12T20:04:52.377", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-70659", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-11-09T16:12:12.004034Z", "version": "2.0.3"}}]}, "published": "2026-11-05T16:17:48.047", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/leejet/stable-diffusion.cpp/commit/4fcc6fef10c6f686801c6e257b22cd6a3deb906b"}, {"source": "security-advisories@github.com", "url": "https://github.com/leejet/stable-diffusion.cpp/pull/1750"}, {"source": "security-advisories@github.com", "url": "https://github.com/leejet/stable-diffusion.cpp/releases/tag/master-763-4fcc6fe"}, {"source": "security-advisories@github.com", "url": "https://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}, {"lang": "en", "value": "CWE-1284"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{"bugzilla": {"description": "stable-diffusion.cpp: stable-diffusion.cpp: Arbitrary code execution via crafted imatrix file", "id": "2567538", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2567538"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.8", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "draft"}, "cwe": "CWE-787", "details": ["A flaw was found in stable-diffusion.cpp. An attacker can trigger a heap-based buffer overflow by convincing a user to load a specially crafted importance matrix (.imatrix) file. Because the application reuses internal memory buffers without resizing them when encountering duplicate tensor entries, out-of-bounds data is written to the heap. This flaw can lead to arbitrary code execution, memory corruption, or a Denial of Service (DoS) crash."], "mitigation": {"lang": "en:us", "value": "Avoid processing or loading untrusted importance matrix files during model conversion workflows. If handling external matrix files is required, run the conversion process within an isolated container or restricted sandbox with limited filesystem access and disabled network capabilities.\nCaveat: Isolating execution environments may introduce operational overhead, but prevents potential arbitrary code execution from compromising the host system."}, "name": "CVE-2026-70659", "public_date": "2026-11-05T15:26:33Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-70659\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-70659\nhttps://github.com/leejet/stable-diffusion.cpp/commit/4fcc6fef10c6f686801c6e257b22cd6a3deb906b\nhttps://github.com/leejet/stable-diffusion.cpp/pull/1750\nhttps://github.com/leejet/stable-diffusion.cpp/releases/tag/master-763-4fcc6fe\nhttps://github.com/leejet/stable-diffusion.cpp/security/advisories/GHSA-6q7q-2v9c-x8m7"], "statement": "Red Hat Product Security has rated this issue as having an Important security impact because successful exploitation can result in arbitrary code execution or a process crash within the application context. Exploitation requires user interaction to explicitly ingest a maliciously crafted importance matrix file during model conversion or quantization. Because this vector depends on processing external files locally and cannot be triggered across the network without user action, exposure is limited to environments actively handling untrusted third-party assets.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,master-763-4fcc6fe)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "stable-diffusion.cpp", "source": "cna", "vendor": "leejet"}, "product": "stable-diffusion.cpp", "vendor": "leejet"}], "created": "2026-11-05T16:45:06.031909+00:00", "updated": "2026-11-05T16:45:06.274330+00:00", "vendors": ["leejet", "leejet$PRODUCT$stable-diffusion.cpp"]}