CVE-2025-71439GHSA-g4cc-763q-h9h6
llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info
ggml-org llama.cpp
CVSS
6.8MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
Text from CVE List
Affected versions 1
- llama.cppaffected: all versions before b5649CVE List
References 6
- github.com/ggml-org/llama.cpp/pull/14145Fixvia CVE List
- github.com/ggml-org/llama.cpp/commit/c33fe8b8c4427202706b1434e9fc8ab5752c9cacFixvia CVE List
- github.com/ggml-org/llama.cpp/releases/tag/b5649Fixvia CVE List
- github.com/ggml-org/llama.cpp/security/advisories/GHSA-g4cc-763q-h9h6Advisoryvia CVE List
- vulncheck.com/advisories/llama-cpp-before-b5649-heap-out-of-bounds-read-via-llama-vocab-impl-print-infoAdvisoryvia CVE List
- github.com/ggml-org/llama.cpp/blob/b5648/src/llama-vocab.cpp#L2771Referencevia CVE List