{"schema_version":1,"title":"Ggml-Org Llama.cpp vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 9 vulnerabilities in Ggml-Org Llama.cpp: 0 in the last 7 days and 9 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-119052, was published on 29 October 2026. 9 vulnerabilities in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/technologies/ggml-org-llama-cpp","json_url":"https://junglewise.ai/threats/technologies/ggml-org-llama-cpp.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/ggml-org-llama-cpp","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":false,"counts":{"high":4,"all_time":9,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":9,"last_90_days":9,"last_365_days":9},"latest":[{"cve":"CVE-2026-119052","cvss":7.5,"slug":"cve-2026-119052-llama-cpp-b2877-before-b11935-contains-an-uncaught-exception","title":"llama.cpp ggml-rpc server denial of service","severity":"high","exploited":false,"published_at":"2026-10-29T14:17:52.31+00:00","url":"https://junglewise.ai/threats/cve-2026-119052-llama-cpp-b2877-before-b11935-contains-an-uncaught-exception"},{"cve":"CVE-2026-118375","cvss":8.1,"slug":"cve-2026-118375-llama-cpp-b8841-before-b11865-contains-an-out-of-bounds-write","title":"llama.cpp out-of-bounds write in ggml-rpc RDMA transport","severity":"high","exploited":false,"published_at":"2026-10-28T03:17:14.077+00:00","url":"https://junglewise.ai/threats/cve-2026-118375-llama-cpp-b8841-before-b11865-contains-an-out-of-bounds-write"},{"cve":"CVE-2026-116829","cvss":6.6,"slug":"cve-2026-116829-llama-cpp-b10398-before-b11301-contains-an-integer-overflow","title":"llama.cpp integer overflow in gguf_init_from_reader","severity":"medium","exploited":false,"published_at":"2026-10-27T01:19:06.583+00:00","url":"https://junglewise.ai/threats/cve-2026-116829-llama-cpp-b10398-before-b11301-contains-an-integer-overflow"},{"cve":"CVE-2026-116816","cvss":7.8,"slug":"cve-2026-116816-llama-cpp-b5899-before-b10261-contains-a-heap-out-of-bounds","title":"llama.cpp heap out-of-bounds write in PLAMO2 tokenizer","severity":"high","exploited":false,"published_at":"2026-10-27T01:19:06.437+00:00","url":"https://junglewise.ai/threats/cve-2026-116816-llama-cpp-b5899-before-b10261-contains-a-heap-out-of-bounds"},{"cve":"CVE-2025-71439","cvss":5.5,"slug":"cve-2025-71439-llama-cpp-before-b5649-contains-a-heap-out-of-bounds-read","title":"llama.cpp heap out-of-bounds read in tokenizer loading","severity":"medium","exploited":false,"published_at":"2026-10-27T01:19:03.47+00:00","url":"https://junglewise.ai/threats/cve-2025-71439-llama-cpp-before-b5649-contains-a-heap-out-of-bounds-read"},{"cve":"CVE-2024-58400","cvss":8.2,"slug":"cve-2024-58400-llama-cpp-before-b3701-contains-an-out-of-bounds-read","title":"llama.cpp out-of-bounds read in decode/encode functions","severity":"high","exploited":false,"published_at":"2026-10-27T01:19:03.08+00:00","url":"https://junglewise.ai/threats/cve-2024-58400-llama-cpp-before-b3701-contains-an-out-of-bounds-read"},{"cve":"CVE-2024-58399","cvss":6.1,"slug":"cve-2024-58399-llama-cpp-before-b2731-contains-an-out-of-bounds-read","title":"llama.cpp out-of-bounds read in llama_model_loader","severity":"medium","exploited":false,"published_at":"2026-10-27T01:19:02.81+00:00","url":"https://junglewise.ai/threats/cve-2024-58399-llama-cpp-before-b2731-contains-an-out-of-bounds-read"},{"cve":"CVE-2026-116467","cvss":5.3,"slug":"cve-2026-116467-a-security-flaw-has-been-discovered-in-ggml-org-llama-cpp-up-to","title":"ggml-org llama.cpp reachable assertion in Mirostat Sampler","severity":"medium","exploited":false,"published_at":"2026-10-26T19:16:30.233+00:00","url":"https://junglewise.ai/threats/cve-2026-116467-a-security-flaw-has-been-discovered-in-ggml-org-llama-cpp-up-to"},{"cve":"CVE-2026-116096","cvss":5.3,"slug":"cve-2026-116096-a-weakness-has-been-identified-in-ggml-org-llama-cpp-affected-by","title":"ggml-org llama.cpp out-of-bounds write in Pocket-TTS","severity":"medium","exploited":false,"published_at":"2026-10-25T23:17:41.897+00:00","url":"https://junglewise.ai/threats/cve-2026-116096-a-weakness-has-been-identified-in-ggml-org-llama-cpp-affected-by"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":8},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Ggml-Org Whisper.cpp","slug":"whisper-cpp","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/whisper-cpp"}],"technology":{"hub":true,"name":"Ggml-Org Llama.cpp","slug":"ggml-org-llama-cpp","vendor":{"hub":true,"name":"Ggml-Org","slug":"ggml-org","url":"https://junglewise.ai/threats/vendors/ggml-org"},"aliases":[],"category":"library","description":"C++ library for running Large Language Models efficiently on consumer hardware.","url":"https://junglewise.ai/threats/technologies/ggml-org-llama-cpp"},"most_severe":[{"cve":"CVE-2024-58400","cvss":8.2,"slug":"cve-2024-58400-llama-cpp-before-b3701-contains-an-out-of-bounds-read","title":"llama.cpp out-of-bounds read in decode/encode functions","severity":"high","exploited":false,"published_at":"2026-10-27T01:19:03.08+00:00","url":"https://junglewise.ai/threats/cve-2024-58400-llama-cpp-before-b3701-contains-an-out-of-bounds-read"},{"cve":"CVE-2026-118375","cvss":8.1,"slug":"cve-2026-118375-llama-cpp-b8841-before-b11865-contains-an-out-of-bounds-write","title":"llama.cpp out-of-bounds write in ggml-rpc RDMA transport","severity":"high","exploited":false,"published_at":"2026-10-28T03:17:14.077+00:00","url":"https://junglewise.ai/threats/cve-2026-118375-llama-cpp-b8841-before-b11865-contains-an-out-of-bounds-write"},{"cve":"CVE-2026-116816","cvss":7.8,"slug":"cve-2026-116816-llama-cpp-b5899-before-b10261-contains-a-heap-out-of-bounds","title":"llama.cpp heap out-of-bounds write in PLAMO2 tokenizer","severity":"high","exploited":false,"published_at":"2026-10-27T01:19:06.437+00:00","url":"https://junglewise.ai/threats/cve-2026-116816-llama-cpp-b5899-before-b10261-contains-a-heap-out-of-bounds"},{"cve":"CVE-2026-119052","cvss":7.5,"slug":"cve-2026-119052-llama-cpp-b2877-before-b11935-contains-an-uncaught-exception","title":"llama.cpp ggml-rpc server denial of service","severity":"high","exploited":false,"published_at":"2026-10-29T14:17:52.31+00:00","url":"https://junglewise.ai/threats/cve-2026-119052-llama-cpp-b2877-before-b11935-contains-an-uncaught-exception"},{"cve":"CVE-2026-116829","cvss":6.6,"slug":"cve-2026-116829-llama-cpp-b10398-before-b11301-contains-an-integer-overflow","title":"llama.cpp integer overflow in gguf_init_from_reader","severity":"medium","exploited":false,"published_at":"2026-10-27T01:19:06.583+00:00","url":"https://junglewise.ai/threats/cve-2026-116829-llama-cpp-b10398-before-b11301-contains-an-integer-overflow"},{"cve":"CVE-2024-58399","cvss":6.1,"slug":"cve-2024-58399-llama-cpp-before-b2731-contains-an-out-of-bounds-read","title":"llama.cpp out-of-bounds read in llama_model_loader","severity":"medium","exploited":false,"published_at":"2026-10-27T01:19:02.81+00:00","url":"https://junglewise.ai/threats/cve-2024-58399-llama-cpp-before-b2731-contains-an-out-of-bounds-read"},{"cve":"CVE-2025-71439","cvss":5.5,"slug":"cve-2025-71439-llama-cpp-before-b5649-contains-a-heap-out-of-bounds-read","title":"llama.cpp heap out-of-bounds read in tokenizer loading","severity":"medium","exploited":false,"published_at":"2026-10-27T01:19:03.47+00:00","url":"https://junglewise.ai/threats/cve-2025-71439-llama-cpp-before-b5649-contains-a-heap-out-of-bounds-read"},{"cve":"CVE-2026-116467","cvss":5.3,"slug":"cve-2026-116467-a-security-flaw-has-been-discovered-in-ggml-org-llama-cpp-up-to","title":"ggml-org llama.cpp reachable assertion in Mirostat Sampler","severity":"medium","exploited":false,"published_at":"2026-10-26T19:16:30.233+00:00","url":"https://junglewise.ai/threats/cve-2026-116467-a-security-flaw-has-been-discovered-in-ggml-org-llama-cpp-up-to"},{"cve":"CVE-2026-116096","cvss":5.3,"slug":"cve-2026-116096-a-weakness-has-been-identified-in-ggml-org-llama-cpp-affected-by","title":"ggml-org llama.cpp out-of-bounds write in Pocket-TTS","severity":"medium","exploited":false,"published_at":"2026-10-25T23:17:41.897+00:00","url":"https://junglewise.ai/threats/cve-2026-116096-a-weakness-has-been-identified-in-ggml-org-llama-cpp-affected-by"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}