Login Request a demo
High severity · published Oct 29, 2026
CVE-2026-119052
llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length
New
7.5
CVSS
–
EPSS
No
On KEV
Description
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LL
llama.cpp · ggml-org
b2877 before b11935 · source: vendor
Affected product
LL
llama.cpp
ggml-org
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-119052
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-119052
patch
https://github.com/ggml-org/llama.cpp/pull/31204
patch
https://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4
product
https://github.com/ggml-org/llama.cpp
release-notes
https://github.com/ggml-org/llama.cpp/releases/tag/b11935
technical-description
https://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356
third-party-advisory
https://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length
More from llama.cpp
9.8
CVE-2026-34159
llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
9.8
CVE-2026-21869
llama.cpp has Out-of-bounds Write in llama-server
8.9
CVE-2025-53630
Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf
8.8
CVE-2025-52566
llama.cpp tokenizer signed vs. unsigned heap overflow
8.8
CVE-2025-49847
llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model