| Component | llama.cpp |
| Severity | medium (CVSS 6.6) |
| CVSS vector | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H |
| Published (NVD) | 2026-10-27 |
| Affected versions | >= b10398, < b11301 >= 0.1.0, < 0.6.0 from the CVE Program record written by the CNA that assigned the CVE |
| Fixed in | b11301, 0.6.0 |
| Weakness | CWE-190 |
| CISA KEV | not listed |
Versions, checked against NVD
NVD's record (status: Awaiting Analysis) lists no affected versions of llama.cpp for this CVE. The ranges above come from the CVE record written by VulnCheck, the CNA that assigned the CVE.
NVD description
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
What to do
- Upgrade llama.cpp to the fixed release of the branch you run:
b11301or0.6.0, or later. - Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
- NVD: CVE-2026-116829
- https://github.com/ggml-org/llama.cpp/blob/v0.5.0/ggml/src/gguf.cpp#L701
- https://github.com/ggml-org/llama.cpp/commit/2149c00f4442dc59302e134a02e4c99d5f7ed9fc
- https://github.com/ggml-org/llama.cpp/issues/29383
- https://github.com/ggml-org/llama.cpp/pull/29384
- https://github.com/ggml-org/llama.cpp/releases/tag/b11301
- https://www.vulncheck.com/advisories/llama-cpp-b10398-before-b11301-integer-overflow-in-gguf-init-from-reader