ひてん@ten_niarazu
llama.cpp（2件） CVE-2024-58400（4.0 8.8 / 3.1 8.2、/completion への未検証トークン ID による範囲外読み取り、未認証リモート、修正版 b3701） CVE-2026-116816（4.0 8.5 / 3.1 7.8、Plamo2 トークナイザのヒープ範囲外書き込み、細工した GGUF モデル、修正版 b10261）
0000028
141 followersView on X
CVE-2026-116816
LOWCVSS 8.5 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
0.0/ 10 priority
Sources & remediation
Other references
- https://github.com/ggml-org/llama.cpp/blob/b10259/src/llama-vocab.cpp#L1376-L1377
- https://github.com/ggml-org/llama.cpp/commit/cf06ad7dfe79e7bf2934150d4fefe1ce8db05490
- https://github.com/ggml-org/llama.cpp/pull/25969
- https://github.com/ggml-org/llama.cpp/pull/26511
- https://github.com/ggml-org/llama.cpp/releases/tag/b10261
Weakness type (CWE)
CWE-129
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day