Browse CVEs

CRITICAL 9.8 CVE-2026-34159 llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation … Llama.cpp Patch available Fix from $2,3002026-04-01 HIGH 7.8 CVE-2026-33298 llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml_nbytes` function allows an a… Llama.cpp No fix yet Fix from $1,9502026-03-24 HIGH 7.8 CVE-2026-27940 llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulnerable to an Integer over… Llama.cpp No fix yet Fix from $1,9502026-03-12 CRITICAL 9.8 CVE-2026-21869 llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input … Llama.cpp Mitigation only Fix from $2,3002026-01-08 HIGH 8.8 CVE-2025-52566 llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's toke… Llama.cpp Patch available Fix from $1,9502025-06-24 HIGH 8.8 CVE-2025-49847 llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer ove… Llama.cpp Patch available Fix from $1,9502025-06-17 CRITICAL 9.8 CVE-2024-42478 llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This v… Llama.cpp Patch available Fix from $2,3002024-08-12 CRITICAL 9.8 CVE-2024-42479 llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This v… Llama.cpp Patch available Fix from $2,3002024-08-12 HIGH 7.5 CVE-2024-42477 llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerabil… Llama.cpp Patch available Fix from $1,9502024-08-12 MEDIUM 6.5 CVE-2024-41130 llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability i… Llama.cpp Patch available Fix from $1,6002024-07-22 HIGH 8.8 CVE-2024-32878 Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file, the code will free this unin… Llama.cpp Mitigation only Fix from $1,9502024-04-26 CRITICAL 9.8 CVE-2024-23605 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-23496 A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21802 A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .ggu… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21825 A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26 CRITICAL 9.8 CVE-2024-21836 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted… Llama.cpp 2024-01-09+ Fix from $2,3002024-02-26