CVE-2026-116816
llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer
ggml-org llama.cpp
CVSS
8.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
Text from CVE List
Affected versions 1
- llama.cppaffected: b5899 before b10261CVE List
References 6
- github.com/ggml-org/llama.cpp/pull/25969Fixvia CVE List
- github.com/ggml-org/llama.cpp/pull/26511Fixvia CVE List
- github.com/ggml-org/llama.cpp/commit/cf06ad7dfe79e7bf2934150d4fefe1ce8db05490Fixvia CVE List
- github.com/ggml-org/llama.cpp/releases/tag/b10261Fixvia CVE List
- vulncheck.com/advisories/llama-cpp-b5899-before-b10261-heap-out-of-bounds-write-via-plamo2-tokenizerAdvisoryvia CVE List
- github.com/ggml-org/llama.cpp/blob/b10259/src/llama-vocab.cpp#L1376-L1377Referencevia CVE List