Llama.cpp

CVEs (6)

• CVE-2024-42479CriAug 12, 2024
  Ggml

  Llama.cpp
  risk 0.58cvss 10.0epss 0.03

  llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This vulnerability is fixed in b3561.

• CVE-2026-21869HigJan 8, 2026
  Ggml

  Llama.cpp
  risk 0.57cvss 8.8epss 0.00

  llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input in the llama.cpp server's completion endpoints without validation to ensure it's non-negative. When a negative value is supplied…

• CVE-2024-32878HigApr 26, 2024
  Ggml

  Llama.cpp
  risk 0.46cvss 7.1epss 0.01

  Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file, the code will free this uninitialized variable later. In a simple POC, it will directly cause a crash. If the file is carefully constructed, it may be…

• CVE-2024-41130MedJul 22, 2024
  Ggml

  Llama.cpp
  risk 0.28cvss 5.4epss 0.00

  llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.

• CVE-2024-42478MedAug 12, 2024
  Ggml

  Llama.cpp
  risk 0.27cvss 5.3epss 0.01

  llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561.

• CVE-2024-42477MedAug 12, 2024
  Ggml

  Llama.cpp
  risk 0.27cvss 5.3epss 0.00

  llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.