TI-2026-26459 CVE-2026-34159
llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
Priority HIGH 82
llama.cpp is an inference of several LLM models in C/C++.
ggml-org
Records53All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
ggml-org records in CISA KEVNo ggml-org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
53 records
Priority HIGH 81
llama.cpp provides LLM inference in C/C++.
Priority HIGH 76
llama.cpp is an inference of several LLM models in C/C++.
Priority HIGH 76
llama.cpp provides LLM inference in C/C++.
TI-2024-15627 CVE-2024-23605 · GHSA-c9jh-pp3m-mqr9
Integer overflow in ggml-org llama.cpp
Priority HIGH 76
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17.
TI-2024-14482 CVE-2024-21802 · GHSA-gwh5-fh5x-ww83
Heap-based buffer overflow in ggml-org llama.cpp
Priority HIGH 76
A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17.
Priority HIGH 73
llama.cpp is an inference of several LLM models in C/C++.
Priority HIGH 73
llama.cpp is an inference of several LLM models in C/C++.
Priority HIGH 73
Llama.cpp is LLM inference in C/C++.
TI-2025-33557 CVE-2025-53630
Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf
Priority HIGH 72
llama.cpp is an inference of several LLM models in C/C++.
Priority HIGH 72
llama.cpp provides LLM inference in C/C++.
TI-2026-25709 CVE-2026-33298
llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing
Priority HIGH 69
llama.cpp is an inference of several LLM models in C/C++.
TI-2026-22284 CVE-2026-27940
llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix
Priority HIGH 69
llama.cpp is an inference of several LLM models in C/C++.
TI-2026-81001 CVE-2026-116829 · GHSA-3jhp-qv93-3428
Integer overflow in llama.cpp GGUF loader allows out-of-bounds access
Priority MEDIUM 64
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero.
TI-2025-43979 CVE-2025-71439 · GHSA-4qpr-vwfh-qwp4
Heap out-of-bounds read in llama.cpp crashes model loading
Priority MEDIUM 63
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs.
Priority MEDIUM 62
llama.cpp provides LLM inference in C/C++.
TI-2026-80229 CVE-2026-116096 · GHSA-w879-pch3-42x5
Out-of-bounds write in llama.cpp Pocket-TTS state slot listing
Priority MEDIUM 55
A weakness has been identified in ggml-org llama.cpp.
TI-2026-15227 CVE-2026-18581 · GHSA-3732-9c5p-7h79
ggml-org llama.cpp Jinja Minja Template parser.cpp assertion
Priority MEDIUM 55
A vulnerability was determined in ggml-org llama.cpp e15efe0.
TI-2026-14368 CVE-2026-17513 · GHSA-hqg6-4q5h-9ggc
ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion
Priority MEDIUM 55
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b.
TI-2026-09034 CVE-2026-10298 · GHSA-jx42-8f9x-g57f
ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference
Priority MEDIUM 55
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2.
TI-2026-01724 CVE-2026-2069 · GHSA-f8m3-93xm-637c
ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflow
Priority MEDIUM 55
A flaw has been found in ggml-org llama.cpp up to 55abc39.
Priority MEDIUM 46
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.
TI-2024-15539 CVE-2024-23496 · GHSA-w4wv-vq5v-xp26
Integer overflow in ggml-org llama.cpp
Priority MEDIUM 46
A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17.
TI-2024-14511 CVE-2024-21836 · GHSA-fhv7-8956-mv3h
Integer overflow in ggml-org llama.cpp
Priority MEDIUM 46
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17.
TI-2024-14500 CVE-2024-21825 · GHSA-5998-89hj-xhfc
Integer overflow in ggml-org llama.cpp
Priority MEDIUM 46
A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17.