PT-2026-125545
CVE-2026-116816
·
Published
2026-10-27
·
Updated
2026-10-27
Description by
CVSS 4.0
8.5
HighMetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
llama.cpp versions b5899 through b10260
Description
A heap out-of-bounds write exists in the
llm tokenizer plamo2::build function. This occurs when loading crafted GGUF models containing BYTE-typed token text with negative parsed values, such as <0x-1>. This allows an attacker to write token IDs before the bytes buffer, which can lead to heap memory corruption, application crashes, or potential arbitrary code execution.Recommendations
Update llama.cpp to version b10261 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾