agentprime: ggml-org-llama-cppEvery new CVE for ggml-org-llama-cpp.https://agentprime.io/CVE-2026-119052: llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Lengthhttps://agentprime.io/advisories/CVE-2026-119052/https://agentprime.io/advisories/CVE-2026-119052/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 13:08:52 GMTCVECVE-2026-118375: llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()https://agentprime.io/advisories/CVE-2026-118375/https://agentprime.io/advisories/CVE-2026-118375/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 28 Oct 2026 02:03:22 GMTCVEcriticalCVE-2026-116840: llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_readerhttps://agentprime.io/advisories/CVE-2026-116840/https://agentprime.io/advisories/CVE-2026-116840/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:33:59 GMTCVECVE-2026-116829: llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_readerhttps://agentprime.io/advisories/CVE-2026-116829/https://agentprime.io/advisories/CVE-2026-116829/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:33:59 GMTCVECVE-2026-116816: llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizerhttps://agentprime.io/advisories/CVE-2026-116816/https://agentprime.io/advisories/CVE-2026-116816/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:33:58 GMTCVECVE-2025-71439: llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_infohttps://agentprime.io/advisories/CVE-2025-71439/https://agentprime.io/advisories/CVE-2025-71439/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:33:57 GMTCVECVE-2024-58400: llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDshttps://agentprime.io/advisories/CVE-2024-58400/https://agentprime.io/advisories/CVE-2024-58400/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:33:57 GMTCVECVE-2024-58399: llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsetshttps://agentprime.io/advisories/CVE-2024-58399/https://agentprime.io/advisories/CVE-2024-58399/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 27 Oct 2026 00:33:56 GMTCVECVE-2026-116467: ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertionhttps://agentprime.io/advisories/CVE-2026-116467/https://agentprime.io/advisories/CVE-2026-116467/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 26 Oct 2026 18:15:14 GMTCVECVE-2026-116096: ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds writehttps://agentprime.io/advisories/CVE-2026-116096/https://agentprime.io/advisories/CVE-2026-116096/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 25 Oct 2026 23:00:24 GMTCVECVE-2026-107183: llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parserhttps://agentprime.io/advisories/CVE-2026-107183/https://agentprime.io/advisories/CVE-2026-107183/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Oct 2026 13:35:41 GMTCVEcriticalCVE-2026-86317: ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertionhttps://agentprime.io/advisories/CVE-2026-86317/https://agentprime.io/advisories/CVE-2026-86317/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 14:15:15 GMTCVECVE-2026-78148: ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereferencehttps://agentprime.io/advisories/CVE-2026-78148/https://agentprime.io/advisories/CVE-2026-78148/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Aug 2026 23:15:11 GMTCVECVE-2026-78147: ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserializationhttps://agentprime.io/advisories/CVE-2026-78147/https://agentprime.io/advisories/CVE-2026-78147/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 23 Aug 2026 23:00:13 GMTCVECVE-2026-43632: llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpointshttps://agentprime.io/advisories/CVE-2026-43632/https://agentprime.io/advisories/CVE-2026-43632/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:53:19 GMTCVEcriticalCVE-2026-43631: llama.cpp b7492–b9060 Use-After-Free RCE via llama-serverhttps://agentprime.io/advisories/CVE-2026-43631/https://agentprime.io/advisories/CVE-2026-43631/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:52:09 GMTCVEcriticalCVE-2026-43630: llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosurehttps://agentprime.io/advisories/CVE-2026-43630/https://agentprime.io/advisories/CVE-2026-43630/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:50:55 GMTCVECVE-2026-43629: llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restorehttps://agentprime.io/advisories/CVE-2026-43629/https://agentprime.io/advisories/CVE-2026-43629/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:48:41 GMTCVEcriticalCVE-2026-43628: llama.cpp b3978–b9058 Integer Underflow via DRY Samplerhttps://agentprime.io/advisories/CVE-2026-43628/https://agentprime.io/advisories/CVE-2026-43628/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:45:52 GMTCVECVE-2026-43627: llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Functionhttps://agentprime.io/advisories/CVE-2026-43627/https://agentprime.io/advisories/CVE-2026-43627/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:40:19 GMTCVECVE-2026-70640: llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpphttps://agentprime.io/advisories/CVE-2026-70640/https://agentprime.io/advisories/CVE-2026-70640/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:38:22 GMTCVECVE-2026-70639: llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpphttps://agentprime.io/advisories/CVE-2026-70639/https://agentprime.io/advisories/CVE-2026-70639/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:37:30 GMTCVECVE-2026-70638: llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpphttps://agentprime.io/advisories/CVE-2026-70638/https://agentprime.io/advisories/CVE-2026-70638/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:35:08 GMTCVECVE-2026-43622: llama.cpp b1886–b7445 Double Free via llama-android.cpphttps://agentprime.io/advisories/CVE-2026-43622/https://agentprime.io/advisories/CVE-2026-43622/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Aug 2026 15:27:07 GMTCVECVE-2026-18581: ggml-org llama.cpp Jinja Minja Template parser.cpp assertionhttps://agentprime.io/advisories/CVE-2026-18581/https://agentprime.io/advisories/CVE-2026-18581/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 00:30:08 GMTCVECVE-2026-17501: ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionhttps://agentprime.io/advisories/CVE-2026-17501/https://agentprime.io/advisories/CVE-2026-17501/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 00:30:11 GMTCVECVE-2026-17500: ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereferencehttps://agentprime.io/advisories/CVE-2026-17500/https://agentprime.io/advisories/CVE-2026-17500/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jul 2026 00:15:12 GMTCVECVE-2026-34159: llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backendhttps://agentprime.io/advisories/CVE-2026-34159/https://agentprime.io/advisories/CVE-2026-34159/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 01 Apr 2026 16:59:59 GMTCVEcriticalCVE-2026-33298: llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsinghttps://agentprime.io/advisories/CVE-2026-33298/https://agentprime.io/advisories/CVE-2026-33298/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 00:01:40 GMTCVECVE-2026-27940: llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fixhttps://agentprime.io/advisories/CVE-2026-27940/https://agentprime.io/advisories/CVE-2026-27940/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Mar 2026 16:39:37 GMTCVECVE-2026-2069: ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflowhttps://agentprime.io/advisories/CVE-2026-2069/https://agentprime.io/advisories/CVE-2026-2069/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 22:02:08 GMTCVECVE-2026-21869: llama.cpp has Out-of-bounds Write in llama-serverhttps://agentprime.io/advisories/CVE-2026-21869/https://agentprime.io/advisories/CVE-2026-21869/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jan 2026 23:37:59 GMTCVECVE-2025-53630: Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in ggufhttps://agentprime.io/advisories/CVE-2025-53630/https://agentprime.io/advisories/CVE-2025-53630/CVSS 8.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 10 Jul 2025 19:32:45 GMTCVECVE-2025-52566: llama.cpp tokenizer signed vs. unsigned heap overflowhttps://agentprime.io/advisories/CVE-2025-52566/https://agentprime.io/advisories/CVE-2025-52566/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Jun 2025 03:21:19 GMTCVECVE-2025-49847: llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Modelhttps://agentprime.io/advisories/CVE-2025-49847/https://agentprime.io/advisories/CVE-2025-49847/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 20:04:40 GMTCVE