CVE-2026-116816High· 7.8▾ Twilightllama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> w…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 27.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
0.1%
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp >= b5899 < b10261Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-58400High· 8.2llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs
CVE-2026-119052High· 7.5llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length
CVE-2026-118375High· 8.1llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()
CVE-2026-116840Medium· 6.1llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader
CVE-2026-116829Medium· 6.6llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader
CVE-2024-58399Medium· 6.1llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets