PT-2026-125545

CVE-2026-116816

Published

2026-10-27

Updated

2026-10-27

Description by

CVSS 4.0

8.5

High

MetricsAV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions llama.cpp versions b5899 through b10260

Description A heap out-of-bounds write exists in the llm tokenizer plamo2::build function. This occurs when loading crafted GGUF models containing BYTE-typed token text with negative parsed values, such as <0x-1>. This allows an attacker to write token IDs before the bytes buffer, which can lead to heap memory corruption, application crashes, or potential arbitrary code execution.

Recommendations Update llama.cpp to version b10261 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Cisc

Jeongwoo Lee

Pedro Cruz

Vendors

Affected products

Weakness enumeration