GGML Llama.cpp

llama.cpp allows write-what-where in rpc_server::set_tensor

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend

llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor

llama.cpp has Out-of-bounds Write in llama-server

llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore

llama.cpp b7492–b9060 Use-After-Free RCE via llama-server

llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints

Use of Uninitialized Variable Vulnerability in llama.cpp

llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model

llama.cpp tokenizer signed vs. unsigned heap overflow

llama.cpp b3978–b9058 Integer Underflow via DRY Sampler

llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp

llama.cpp b1886–b7445 Double Free via llama-android.cpp

llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function

llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing

llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n value in a POST request to /rerank.

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.

llama.cpp global-buffer-overflow in ggml_type_size

llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.

llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp

llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp

llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure

llama.cpp null pointer dereference in gguf_init_from_file