# ggml-org llama.cpp.

Every CVE that names ggml-org llama.cpp among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length](https://agentprime.io/advisories/CVE-2026-119052.md)
  `CVE-2026-119052` · CVE record: ggml-org llama.cpp · CVSS 8.7 High · Not analysed yet · Published 29 Oct 2026 · Tags: CWE-248
- [llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()](https://agentprime.io/advisories/CVE-2026-118375.md)
  `CVE-2026-118375` · CVE record: ggml-org llama.cpp · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Memory corruption
- [llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader](https://agentprime.io/advisories/CVE-2026-116840.md)
  `CVE-2026-116840` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader](https://agentprime.io/advisories/CVE-2026-116829.md)
  `CVE-2026-116829` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer](https://agentprime.io/advisories/CVE-2026-116816.md)
  `CVE-2026-116816` · CVE record: ggml-org llama.cpp · CVSS 8.5 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-129
- [llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info](https://agentprime.io/advisories/CVE-2025-71439.md)
  `CVE-2025-71439` · CVE record: ggml-org llama.cpp · CVSS 6.8 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs](https://agentprime.io/advisories/CVE-2024-58400.md)
  `CVE-2024-58400` · CVE record: ggml-org llama.cpp · CVSS 8.8 High · Not analysed yet · Published 27 Oct 2026 · Tags: CWE-129
- [llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets](https://agentprime.io/advisories/CVE-2024-58399.md)
  `CVE-2024-58399` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 27 Oct 2026 · Tags: Memory corruption
- [ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion](https://agentprime.io/advisories/CVE-2026-116467.md)
  `CVE-2026-116467` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 26 Oct 2026 · Tags: Denial of service
- [ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write](https://agentprime.io/advisories/CVE-2026-116096.md)
  `CVE-2026-116096` · CVE record: ggml-org llama.cpp · CVSS 4.8 Medium · Not analysed yet · Published 25 Oct 2026 · Tags: Memory corruption
- [llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser](https://agentprime.io/advisories/CVE-2026-107183.md)
  `CVE-2026-107183` · CVE record: ggml-org llama.cpp · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Memory corruption
- [ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion](https://agentprime.io/advisories/CVE-2026-86317.md)
  `CVE-2026-86317` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Denial of service
- [ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference](https://agentprime.io/advisories/CVE-2026-78148.md)
  `CVE-2026-78148` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 23 Aug 2026 · Tags: Denial of service, Memory corruption
- [ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization](https://agentprime.io/advisories/CVE-2026-78147.md)
  `CVE-2026-78147` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 23 Aug 2026 · Tags: Insecure deserialization, CWE-20
- [llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints](https://agentprime.io/advisories/CVE-2026-43632.md)
  `CVE-2026-43632` · CVE record: ggml-org llama.cpp · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Race condition, Memory corruption
- [llama.cpp b7492–b9060 Use-After-Free RCE via llama-server](https://agentprime.io/advisories/CVE-2026-43631.md)
  `CVE-2026-43631` · CVE record: ggml-org llama.cpp · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Race condition, Memory corruption
- [llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure](https://agentprime.io/advisories/CVE-2026-43630.md)
  `CVE-2026-43630` · CVE record: ggml-org llama.cpp · CVSS 6.3 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption, Information disclosure
- [llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore](https://agentprime.io/advisories/CVE-2026-43629.md)
  `CVE-2026-43629` · CVE record: ggml-org llama.cpp · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [llama.cpp b3978–b9058 Integer Underflow via DRY Sampler](https://agentprime.io/advisories/CVE-2026-43628.md)
  `CVE-2026-43628` · CVE record: ggml-org llama.cpp · CVSS 8.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function](https://agentprime.io/advisories/CVE-2026-43627.md)
  `CVE-2026-43627` · CVE record: ggml-org llama.cpp · CVSS 8.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp](https://agentprime.io/advisories/CVE-2026-70640.md)
  `CVE-2026-70640` · CVE record: ggml-org llama.cpp · CVSS 7.3 High · Not analysed yet · Published 6 Aug 2026 · Tags: Race condition, Memory corruption
- [llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp](https://agentprime.io/advisories/CVE-2026-70639.md)
  `CVE-2026-70639` · CVE record: ggml-org llama.cpp · CVSS 6.8 Medium · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp](https://agentprime.io/advisories/CVE-2026-70638.md)
  `CVE-2026-70638` · CVE record: ggml-org llama.cpp · CVSS 8.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption
- [llama.cpp b1886–b7445 Double Free via llama-android.cpp](https://agentprime.io/advisories/CVE-2026-43622.md)
  `CVE-2026-43622` · CVE record: ggml-org llama.cpp · CVSS 8.5 High · Not analysed yet · Published 6 Aug 2026 · Tags: Memory corruption, CWE-762
- [ggml-org llama.cpp Jinja Minja Template parser.cpp assertion](https://agentprime.io/advisories/CVE-2026-18581.md)
  `CVE-2026-18581` · CVE record: ggml-org llama.cpp · CVSS 4.8 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Denial of service
- [ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion](https://agentprime.io/advisories/CVE-2026-17501.md)
  `CVE-2026-17501` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Denial of service
- [ggml-org llama.cpp json-schema-to-grammar.cpp \_visit_pattern null pointer dereference](https://agentprime.io/advisories/CVE-2026-17500.md)
  `CVE-2026-17500` · CVE record: ggml-org llama.cpp · CVSS 6.9 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Denial of service, Memory corruption
- [llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend](https://agentprime.io/advisories/CVE-2026-34159.md)
  `CVE-2026-34159` · CVE record: ggml-org llama.cpp · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Apr 2026 · Tags: Memory corruption
- [llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing](https://agentprime.io/advisories/CVE-2026-33298.md)
  `CVE-2026-33298` · CVE record: ggml-org llama.cpp · CVSS 7.8 High · Not analysed yet · Published 24 Mar 2026 · Tags: Memory corruption
- [llama.cpp has a Heap Buffer Overflow via Integer Overflow in \`mem_size\` Calculation — Bypass of CVE-2025-53630 Fix](https://agentprime.io/advisories/CVE-2026-27940.md)
  `CVE-2026-27940` · CVE record: ggml-org llama.cpp · CVSS 7.8 High · Not analysed yet · Published 12 Mar 2026 · Tags: Memory corruption
- [ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflow](https://agentprime.io/advisories/CVE-2026-2069.md)
  `CVE-2026-2069` · CVE record: ggml-org llama.cpp · CVSS 4.8 Medium · Not analysed yet · Published 6 Feb 2026 · Tags: Memory corruption
- [llama.cpp has Out-of-bounds Write in llama-server](https://agentprime.io/advisories/CVE-2026-21869.md)
  `CVE-2026-21869` · CVE record: ggml-org llama.cpp · CVSS 8.8 High · Not analysed yet · Published 7 Jan 2026 · Tags: Memory corruption
- [Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf](https://agentprime.io/advisories/CVE-2025-53630.md)
  `CVE-2025-53630` · CVE record: ggml-org llama.cpp · CVSS 8.9 High · Not analysed yet · Published 10 Jul 2025 · Tags: Memory corruption
- [llama.cpp tokenizer signed vs. unsigned heap overflow](https://agentprime.io/advisories/CVE-2025-52566.md)
  `CVE-2025-52566` · CVE record: ggml-org llama.cpp · CVSS 8.6 High · Not analysed yet · Published 24 Jun 2025 · Tags: Memory corruption, CWE-195
- [llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model](https://agentprime.io/advisories/CVE-2025-49847.md)
  `CVE-2025-49847` · CVE record: ggml-org llama.cpp · CVSS 8.8 High · Not analysed yet · Published 17 Jun 2025 · Tags: Memory corruption, CWE-195

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=ggml-org-llama-cpp>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/ggml-org-llama-cpp/>. Everything for agents: <https://agentprime.io/llms.txt>.