gcdRadar
products/llama-cpp

llama.cpp

Records
44
Disclosed CVEs
42
Exploited (sev 3–4)
2
CISA KEV flagged
0

Newest record 2026-10-29 · 43 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)

Exploited or KEV-listed · 2

Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.

  1. closed5.3
    llama.cpp CVE-2026-116096: Heap out-of-bounds write in llama.cpp Pocket-TTS component

    Exploited · since 25 Oct 2026 · CVE-2026-116096

    AI
  2. closed
    llama.cpp Misconfigured Llama.cpp Servers Expose Sensitive User Prompts

    Exploited · since 11 Apr 2025

    AI

Disclosures by month · last 24 months

Dec ’2432 disclosed · peak 13 in Aug ’26Nov ’26

Disclosed CVEs, no confirmed exploitation · 42

  1. closed8.7
    llama.cpp CVE-2026-119052: llama.cpp uncaught exception in ggml-rpc server

    Disclosed · since 29 Oct 2026 · CVE-2026-119052

    AI
  2. closed9.2
    llama.cpp CVE-2026-118375: llama.cpp out-of-bounds write in RDMA transport

    Disclosed · Patched · since 28 Oct 2026 · CVE-2026-118375

    AI
  3. closed6.9
    llama.cpp CVE-2024-58399: llama.cpp Out-of-Bounds Read Vulnerability

    Disclosed · Patched · since 27 Oct 2026 · CVE-2024-58399

    AI
  4. closed6.9
    llama.cpp CVE-2026-116467: llama.cpp Mirostat Sampler assertion vulnerability

    Disclosed · No patch yet · since 26 Oct 2026 · CVE-2026-116467

    AI
  5. closed9.2
    llama.cpp CVE-2026-107183: Use-after-free and double free vulnerability in llama.cpp

    Disclosed · since 7 Oct 2026 · CVE-2026-107183

    AI
  6. closed6.9
    llama.cpp CVE-2026-86317: Assertion failure in ggml-org llama.cpp RPC server

    Disclosed · since 7 Sep 2026 · CVE-2026-86317

    AI
  7. closed7.5
    llama.cpp llama.cpp vulnerable to reachable assertion via gguf reader

    Disclosed · since 1 Sep 2026 · CVE-2026-52131

    AI
  8. closed7.5
    llama.cpp llama.cpp vulnerable to uncontrolled recursion and denial of service

    Disclosed · since 1 Sep 2026 · CVE-2026-52130

    AI
  9. closed7.5
    llama.cpp llama.cpp vulnerable to denial of service via negative top_n reranking value

    Disclosed · since 1 Sep 2026 · CVE-2026-52132

    AI
  10. closed6.9
    llama.cpp CVE-2026-78148: llama.cpp RPC Server Null Pointer Dereference Vulnerability

    Disclosed · since 24 Aug 2026 · CVE-2026-78148

    AI
  11. closed7.3
    llama.cpp CVE-2026-78147: llama.cpp RPC server vulnerable to insecure deserialization

    Disclosed · since 23 Aug 2026 · CVE-2026-78147

    AI
  12. closed8.5
    llama.cpp CVE-2026-43622: llama.cpp double free vulnerability in LLaMA-Android

    Disclosed · since 6 Aug 2026 · CVE-2026-43622

    AI
  13. closed6.8
    llama.cpp Null Pointer Dereference in LLaMA-Android JNI Wrapper

    Disclosed · since 6 Aug 2026 · CVE-2026-70639

    AI
  14. closed8.5
    llama.cpp Integer Overflow in llama.cpp llama_batch_init

    Disclosed · since 6 Aug 2026 · CVE-2026-43627

    AI
  15. closed6.5
    llama.cpp Out-of-Bounds Read in llama.cpp Slot Save Directory

    Disclosed · since 6 Aug 2026 · CVE-2026-43630

    AI
  16. closed9.2
    llama.cpp Use-After-Free Vulnerability in llama.cpp llama-server

    Disclosed · since 6 Aug 2026 · CVE-2026-43631

    AI
  17. closed7.3
    llama.cpp CVE-2026-70640: Race condition use-after-free in LLaMA-Android JNI wrapper

    Disclosed · since 6 Aug 2026 · CVE-2026-70640

    AI
  18. closed8.5
    llama.cpp CVE-2026-43628: Integer underflow in llama.cpp DRY sampler causes denial of service

    Disclosed · since 6 Aug 2026 · CVE-2026-43628

    AI
  19. closed9.2
    llama.cpp CVE-2026-43629: Heap buffer overflow in llama.cpp KV cache state restore

    Disclosed · since 6 Aug 2026 · CVE-2026-43629

    AI
  20. closed8.5
    llama.cpp CVE-2026-70638: Integer overflow vulnerability in LLaMA-Android JNI wrapper

    Disclosed · since 6 Aug 2026 · CVE-2026-70638

    AI
  21. closed9.2
    llama.cpp CVE-2026-43632: Use-after-free vulnerability in llama-server tokenization endpoints

    Disclosed · since 6 Aug 2026 · CVE-2026-43632

    AI
  22. closed3.3
    llama.cpp CVE-2026-18581: Reachable assertion vulnerability in llama.cpp parser

    Disclosed · since 3 Aug 2026 · CVE-2026-18581

    AI
  23. closed6.9
    llama.cpp CVE-2026-17500: Null pointer dereference in llama.cpp JSON-Schema-to-GBNF

    Disclosed · since 27 Jul 2026 · CVE-2026-17500

    AI
  24. closed6.9
    llama.cpp CVE-2026-17501: Uncontrolled recursion flaw in llama.cpp JSON-Schema-to-GBNF

    Disclosed · since 27 Jul 2026 · CVE-2026-17501

    AI
  25. closed9.8
    llama.cpp CVE-2026-34159: RCE Vulnerability in llama.cpp RPC Backend

    Disclosed · since 1 Apr 2026 · CVE-2026-34159

    AI
  26. closed7.8
    llama.cpp CVE-2026-33298: Integer overflow in llama.cpp allows remote code execution

    Disclosed · since 24 Mar 2026 · CVE-2026-33298

    AI
  27. closed7.8
    llama.cpp CVE-2026-27940: Integer overflow in llama.cpp gguf parser

    Disclosed · since 12 Mar 2026 · CVE-2026-27940

    AI
  28. closed3.3
    llama.cpp CVE-2026-2069: Llama.cpp Stack-Based Buffer Overflow in Grammar Handler

    Disclosed · since 6 Feb 2026 · CVE-2026-2069

    AI
  29. closed9.8
    llama.cpp Llama.cpp Completion Endpoint Memory Corruption Vulnerability

    Disclosed · since 8 Jan 2026 · CVE-2026-21869

    AI
  30. closed8.9
    llama.cpp Integer Overflow Vulnerability in llama.cpp

    Disclosed · since 10 Jul 2025 · CVE-2025-53630

    AI
  31. closed8.8
    llama.cpp CVE-2025-52566: llama.cpp Tokenizer Integer Overflow Vulnerability

    Disclosed · since 24 Jun 2025 · CVE-2025-52566

    AI
  32. closed8.8
    llama.cpp CVE-2025-49847: Buffer overflow in llama.cpp vocabulary loading

    Disclosed · since 17 Jun 2025 · CVE-2025-49847

    AI
  33. closed9.8
    llama.cpp CVE-2024-42478: Arbitrary address read vulnerability in llama.cpp

    Disclosed · since 12 Aug 2024 · CVE-2024-42478

    AI
  34. closed10.0
    llama.cpp CVE-2024-42479: Arbitrary address write vulnerability in llama.cpp

    Disclosed · since 12 Aug 2024 · CVE-2024-42479

    AI
  35. closed7.5
    llama.cpp CVE-2024-42477: Global buffer overflow in llama.cpp RPC tensor handling

    Disclosed · since 12 Aug 2024 · CVE-2024-42477

    AI
  36. closed6.5
    llama.cpp CVE-2024-41130: Null pointer dereference vulnerability in llama.cpp

    Disclosed · since 22 Jul 2024 · CVE-2024-41130

    AI
  37. closed8.8
    llama.cpp CVE-2024-32878: Llama.cpp heap uninitialized variable vulnerability

    Disclosed · since 26 Apr 2024 · CVE-2024-32878

    AI
  38. closed8.8
    llama.cpp Heap-based buffer overflow in llama.cpp header.n_kv

    Disclosed · since 26 Feb 2024 · CVE-2024-23605

    AI
  39. closed8.8
    llama.cpp Heap-based buffer overflow in llama.cpp info-ne

    Disclosed · since 26 Feb 2024 · CVE-2024-21802

    AI
  40. closed8.8
    llama.cpp Heap-based buffer overflow in llama.cpp gguf_fread_str

    Disclosed · since 26 Feb 2024 · CVE-2024-23496

    AI
  41. closed8.8
    llama.cpp CVE-2024-21836: llama.cpp heap-based buffer overflow in tensor headers

    Disclosed · since 26 Feb 2024 · CVE-2024-21836

    AI
  42. closed8.8
    llama.cpp CVE-2024-21825: llama.cpp heap-based buffer overflow in GGUF parsing

    Disclosed · since 26 Feb 2024 · CVE-2024-21825

    AI

Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.