Top products
Latest CVEs
The 15 most recently published vulnerabilities affecting ggml.
- CVE-2026-34159llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend9.8
- CVE-2026-33298llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing7.8
- CVE-2026-27940llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix7.8
- CVE-2026-21869llama.cpp has Out-of-bounds Write in llama-server8.8
- CVE-2025-52566llama.cpp tokenizer signed vs. unsigned heap overflow8.6
- CVE-2025-49847llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model8.8
- CVE-2024-42479llama.cpp allows write-what-where in rpc_server::set_tensor10.0
- CVE-2024-42478llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor5.3
- CVE-2024-42477llama.cpp global-buffer-overflow in ggml_type_size5.3
- CVE-2024-41130llama.cpp null pointer dereference in gguf_init_from_file5.4
- CVE-2024-32878 Use of Uninitialized Variable Vulnerability in llama.cpp7.1
- CVE-2024-21825A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to ...8.8
- CVE-2024-23496A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacke...8.8
- CVE-2024-21802A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker c...8.8
- CVE-2024-21836A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attac...8.8