CVE-2026-116829

Name of the Vulnerable Software and Affected Versions llama.cpp versions b10398 through b11300

Description An integer overflow exists in the gguf init from reader() function. This allows attackers to bypass tensor element-count validation by providing shapes with a product that wraps to zero. By crafting GGUF files with enormous tensor extents, attackers can cause ggml nbytes() and strides to overflow, leading to out-of-bounds memory access when buffers are sized based on the wrapped byte counts.

Recommendations Update llama.cpp to version b11301 or later.