LL
Product
llama.cpp
28
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 1High 14Medium 12Low 1
Watch
Add llama.cpp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116829 New | 6.6 | Oct 27 | llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader Affected: b10398 before b11301; 0.1.0 before 0.6.0 |
| CVE-2026-43630 | 6.5 | Aug 6 | llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure Affected: b4882 before b8487 |
| CVE-2026-116840 New | 6.1 | Oct 27 | llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader Affected: b5854 before b11275; 0.1.0 before 0.6.0 |
| CVE-2024-58399 New | 6.1 | Oct 27 | llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets Affected: b1046 before b2731 |
| CVE-2025-71439 New | 5.5 | Oct 27 | llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info Affected: before b5649 |
| CVE-2026-70639 | 5.5 | Aug 6 | llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp Affected: b1886 through b7445; 0.9.0 through 0.17.1 |
| CVE-2026-116467 New | 5.3 | Oct 26 | ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion Affected: 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; +1 more |
| CVE-2026-116096 New | 5.3 | Oct 25 | ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write Affected: 0.4.0; 0.17.1; 55abc39; 55d4206c8; b5693; b7445; +5 more |
| CVE-2026-86317 | 5.3 | Sep 7 | ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion Affected: 0.1; 0.2; 0.3; 0.4.0 |
| CVE-2026-78148 | 5.3 | Aug 23 | ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference Affected: bec4772f6 |
| CVE-2026-17501 | 5.3 | Jul 27 | ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion Affected: e15efe0 |
| CVE-2026-17500 | 5.3 | Jul 27 | ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference Affected: d006858; e15efe0 |
Showing 12