# CVE-2026-118375: llama.cpp out-of-bounds write in ggml-rpc RDMA transport

Source: https://junglewise.ai/threats/cve-2026-118375-llama-cpp-b8841-before-b11865-contains-an-out-of-bounds-write  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-28. Updated: 2026-10-28  
License: CC BY 4.0 with a link back

CVE-2026-118375 · Severity: high · CVSS 8.1 · Published 2026-10-28

llama.cpp is a C/C++ library for running large language model inference. An unauthenticated remote attacker can send a specially crafted RDMA message to a running RPC server, causing a stack buffer overflow that crashes the service or potentially executes arbitrary code on the host.

Technologies: [Ggml-Org Llama.Cpp](https://junglewise.ai/threats/technologies/ggml-org-llama-cpp). Vendors: [Ggml-Org](https://junglewise.ai/threats/vendors/ggml-org).

## Quick answers

**Is CVE-2026-118375 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-118375 being exploited in the wild.

**How severe is CVE-2026-118375?** High severity, with a CVSS score of 8.1, published 28 October 2026.

**Which products and versions are affected?** Ggml-Org Llama.Cpp before b11865.

**Is there a fix for CVE-2026-118375?** Yes: fixed in b11865. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-118375 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-118375?** Check whether you run Ggml-Org Llama.Cpp at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in b11865

## Technical details

The ggml-rpc RDMA transport's rdma_recv() function fails to validate buffer sizes when processing HELLO messages with advertised RDMA capabilities, allowing an attacker to write up to 256 KiB into a 1-byte stack variable in rpc_serve_client(). This out-of-bounds write occurs without authentication, leveraging the network-accessible RPC server interface.

## Affected products

- ggml-org llama.cpp before b11865

## Timeline

- 2026-10-28: disclosed

## References

- [https://github.com/ggml-org/llama.cpp](https://github.com/ggml-org/llama.cpp)
- [https://github.com/ggml-org/llama.cpp/blob/620d2225cc436ab0b001e3200e590e3b286ef9ab/ggml/src/ggml-rpc/transport.cpp](https://github.com/ggml-org/llama.cpp/blob/620d2225cc436ab0b001e3200e590e3b286ef9ab/ggml/src/ggml-rpc/transport.cpp)

## Related threats

- [llama.cpp ggml-rpc server denial of service](https://junglewise.ai/threats/cve-2026-119052-llama-cpp-b2877-before-b11935-contains-an-uncaught-exception)
- [llama.cpp integer overflow in gguf_init_from_reader](https://junglewise.ai/threats/cve-2026-116829-llama-cpp-b10398-before-b11301-contains-an-integer-overflow)
- [llama.cpp heap out-of-bounds write in PLAMO2 tokenizer](https://junglewise.ai/threats/cve-2026-116816-llama-cpp-b5899-before-b10261-contains-a-heap-out-of-bounds)
- [llama.cpp heap out-of-bounds read in tokenizer loading](https://junglewise.ai/threats/cve-2025-71439-llama-cpp-before-b5649-contains-a-heap-out-of-bounds-read)
- [llama.cpp out-of-bounds read in decode/encode functions](https://junglewise.ai/threats/cve-2024-58400-llama-cpp-before-b3701-contains-an-out-of-bounds-read)