ggml-org vulnerabilities

CVEs per yearBy the year they were published

1. 202633
2. 20265
3. 20262

Newest CVEs

• CVE-2026-119052

  llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length

  ggml-org · llama.cpp

  High8.7
• CVE-2026-118375

  llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()

  ggml-org · llama.cpp

  Critical9.2
• CVE-2026-116840

  llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader

  ggml-org · llama.cpp

  Medium6.9
• CVE-2026-116829

  llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader

  ggml-org · llama.cpp

  Medium6.9
• CVE-2026-116816

  llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer

  ggml-org · llama.cpp

  High8.5
• CVE-2025-71439

  llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

  ggml-org · llama.cpp

  Medium6.8
• CVE-2024-58400

  llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

  ggml-org · llama.cpp

  High8.8
• CVE-2024-58399

  llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets

  ggml-org · llama.cpp

  Medium6.9
• CVE-2026-116467

  ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion

  ggml-org · llama.cpp

  Medium6.9
• CVE-2026-116096

  ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write

  ggml-org · llama.cpp

  Medium4.8