Vulnerability index

Browse CVEs

16 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Llama.cpp CRITICAL 9.8
CVE-2026-34159

llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation …

Patch available
Fix from $2,300 2026-04-01
Llama.cpp HIGH 7.8
CVE-2026-33298

llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml_nbytes` function allows an a…

No fix yet
Fix from $1,950 2026-03-24
Llama.cpp HIGH 7.8
CVE-2026-27940

llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer over…

No fix yet
Fix from $1,950 2026-03-12
Llama.cpp CRITICAL 9.8
CVE-2026-21869

llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input …

Mitigation only
Fix from $2,300 2026-01-08
Llama.cpp HIGH 8.8
CVE-2025-52566

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's toke…

Patch available
Fix from $1,950 2025-06-24
Llama.cpp HIGH 8.8
CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer ove…

Patch available
Fix from $1,950 2025-06-17
Llama.cpp CRITICAL 9.8
CVE-2024-42478

llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This v…

Patch available
Fix from $2,300 2024-08-12
Llama.cpp CRITICAL 9.8
CVE-2024-42479

llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This v…

Patch available
Fix from $2,300 2024-08-12
Llama.cpp HIGH 7.5
CVE-2024-42477

llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerabil…

Patch available
Fix from $1,950 2024-08-12
Llama.cpp MEDIUM 6.5
CVE-2024-41130

llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability i…

Patch available
Fix from $1,600 2024-07-22
Llama.cpp HIGH 8.8
CVE-2024-32878

Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file, the code will free this unin…

Mitigation only
Fix from $1,950 2024-04-26
Llama.cpp CRITICAL 9.8
CVE-2024-23605

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu…

Fix: 2024-01-09+
Fix from $2,300 2024-02-26
Llama.cpp CRITICAL 9.8
CVE-2024-23496

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .…

Fix: 2024-01-09+
Fix from $2,300 2024-02-26
Llama.cpp CRITICAL 9.8
CVE-2024-21802

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu…

Fix: 2024-01-09+
Fix from $2,300 2024-02-26
Llama.cpp CRITICAL 9.8
CVE-2024-21825

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2…

Fix: 2024-01-09+
Fix from $2,300 2024-02-26
Llama.cpp CRITICAL 9.8
CVE-2024-21836

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted…

Fix: 2024-01-09+
Fix from $2,300 2024-02-26