Ggml-org vulnerabilities

Products

• Llama.cpp 45
• Whisper.cpp 5

Newest

• ggml-org llama.cpp llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length CVE-2026-119052 8.7 HighOctober 29, 2026
• ggml-org llama.cpp llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv() CVE-2026-118375 9.2 CriticalOctober 28, 2026
• ggml-org llama.cpp llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader CVE-2026-116840 Fix available 6.9 MediumOctober 27, 2026
• ggml-org llama.cpp llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader CVE-2026-116829 Fix available 6.9 MediumOctober 27, 2026
• ggml-org llama.cpp llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer CVE-2026-116816 Fix available 8.5 HighOctober 27, 2026
• ggml-org llama.cpp llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info CVE-2025-71439 Fix available 6.8 MediumOctober 27, 2026
• ggml-org llama.cpp llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs CVE-2024-58400 8.8 HighOctober 27, 2026
• ggml-org llama.cpp llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets CVE-2024-58399 6.9 MediumOctober 27, 2026
• ggml-org llama.cpp ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion CVE-2026-116467 6.9 MediumOctober 26, 2026
• ggml-org llama.cpp ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write CVE-2026-116096 4.8 MediumOctober 25, 2026
• ggml-org whisper.cpp ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds CVE-2026-110810 Fix available 2.4 LowOctober 15, 2026
• ggml-org llama.cpp llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser CVE-2026-107183 9.2 CriticalOctober 7, 2026
• ggml-org llama.cpp ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion CVE-2026-86317 6.9 MediumSeptember 7, 2026
• ggml-org llama.cpp ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference CVE-2026-78148 6.9 MediumAugust 23, 2026
• ggml-org llama.cpp ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization CVE-2026-78147 6.9 MediumAugust 23, 2026
• ggml llama.cpp llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints CVE-2026-43632 9.2 CriticalAugust 6, 2026
• ggml llama.cpp llama.cpp b7492–b9060 Use-After-Free RCE via llama-server CVE-2026-43631 9.2 CriticalAugust 6, 2026
• ggml llama.cpp llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure CVE-2026-43630 Fix available 6.3 MediumAugust 6, 2026
• ggml llama.cpp llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore CVE-2026-43629 9.2 CriticalAugust 6, 2026
• ggml llama.cpp llama.cpp b3978–b9058 Integer Underflow via DRY Sampler CVE-2026-43628 8.5 HighAugust 6, 2026
• ggml llama.cpp llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function CVE-2026-43627 8.5 HighAugust 6, 2026
• ggml llama.cpp llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp CVE-2026-70640 Fix available 7.3 HighAugust 6, 2026
• ggml llama.cpp llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp CVE-2026-70639 Fix available 6.8 MediumAugust 6, 2026
• ggml llama.cpp llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp CVE-2026-70638 Fix available 8.5 HighAugust 6, 2026
• ggml llama.cpp llama.cpp b1886–b7445 Double Free via llama-android.cpp CVE-2026-43622 Fix available 8.5 HighAugust 6, 2026
• ggml-org llama.cpp ggml-org llama.cpp Jinja Minja Template parser.cpp assertion CVE-2026-18581 4.8 MediumAugust 3, 2026
• ggml-org whisper.cpp ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion CVE-2026-17513 4.8 MediumJuly 27, 2026
• ggml-org whisper.cpp ggml-org whisper.cpp log_mel_spectrogram out-of-bounds CVE-2026-17512 4.8 MediumJuly 27, 2026
• ggml-org llama.cpp ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion CVE-2026-17501 6.9 MediumJuly 27, 2026
• ggml-org llama.cpp ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference CVE-2026-17500 6.9 MediumJuly 27, 2026
• ggml-org whisper.cpp ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference CVE-2026-10298 4.8 MediumJune 1, 2026
• ggml llama.cpp llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend CVE-2026-34159 Public exploitFix available 9.8 CriticalApril 1, 2026
• ggml llama.cpp llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing CVE-2026-33298 Fix available 7.8 HighMarch 24, 2026
• ggml llama.cpp llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix CVE-2026-27940 Public exploitFix available 7.8 HighMarch 12, 2026
• ggml-org llama.cpp ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflow CVE-2026-2069 4.8 MediumFebruary 6, 2026
• ggml llama.cpp llama.cpp has Out-of-bounds Write in llama-server CVE-2026-21869 Fix available 8.8 HighJanuary 7, 2026
• ggml-org whisper.cpp ggml-org whisper.cpp common-whisper.cpp read_audio_data use after free CVE-2025-14569 4.8 MediumDecember 12, 2025
• ggml-org llama.cpp Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf CVE-2025-53630 Fix available 8.9 HighJuly 10, 2025
• ggml llama.cpp llama.cpp tokenizer signed vs. unsigned heap overflow CVE-2025-52566 Fix available 8.6 HighJune 24, 2025
• ggml llama.cpp llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model CVE-2025-49847 Fix available 8.8 HighJune 17, 2025
• ggerganov llama.cpp llama.cpp allows write-what-where in rpc_server::set_tensor CVE-2024-42479 10.0 CriticalAugust 12, 2024
• ggerganov llama.cpp llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor CVE-2024-42478 5.3 MediumAugust 12, 2024
• ggerganov llama.cpp llama.cpp global-buffer-overflow in ggml_type_size CVE-2024-42477 5.3 MediumAugust 12, 2024
• ggerganov llama.cpp llama.cpp null pointer dereference in gguf_init_from_file CVE-2024-41130 5.4 MediumJuly 22, 2024
• ggerganov llama.cpp Use of Uninitialized Variable Vulnerability in llama.cpp CVE-2024-32878 7.1 HighApril 26, 2024
• ggerganov llama.cpp A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY... CVE-2024-21825 8.8 HighFebruary 26, 2024
• ggerganov llama.cpp A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str... CVE-2024-23496 8.8 HighFebruary 26, 2024
• ggerganov llama.cpp A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors... CVE-2024-21836 8.8 HighFebruary 26, 2024
• ggml llama.cpp A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality... CVE-2024-21802 8.8 HighFebruary 26, 2024
• ggerganov llama.cpp A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality... CVE-2024-23605 8.8 HighFebruary 26, 2024