llama.cpp
Records
39
Disclosed CVEs
38
Exploited (sev 3–4)
1
CISA KEV flagged
0
Newest record 2026-10-07 · 38 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 1
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
- 2025-04-11Misconfigured Llama.cpp Servers Expose Sensitive User Prompts3 Exploitedllama.cpp · data-leak · misconfiguration
Disclosures by month · last 24 months
▁▁ ▁▁▁▁ ▁█▂▁
Nov ’2428 disclosed · peak 13 in Aug ’26Oct ’26
Disclosed CVEs, no confirmed exploitation · 38
- 2026-10-07CVE-2026-107183CVE-2026-107183: Use-after-free and double free vulnerability in llama.cpp2 Discloseduse-after-free · heap-corruption
- 2026-09-07CVE-2026-86317CVE-2026-86317: Assertion failure in ggml-org llama.cpp RPC server2 Disclosedllama.cpp · deserialization
- 2026-09-01CVE-2026-52131llama.cpp vulnerable to reachable assertion via gguf reader2 Disclosedassertion-failure
- 2026-09-01CVE-2026-52130llama.cpp vulnerable to uncontrolled recursion and denial of service2 Discloseddenial-of-service · recursion
- 2026-09-01CVE-2026-52132llama.cpp vulnerable to denial of service via negative top_n reranking value2 Discloseddenial-of-service
- 2026-08-24CVE-2026-78148CVE-2026-78148: llama.cpp RPC Server Null Pointer Dereference Vulnerability2 Disclosedllama.cpp · null-pointer-dereference
- 2026-08-23CVE-2026-78147CVE-2026-78147: llama.cpp RPC server vulnerable to insecure deserialization2 Disclosedllama.cpp · deserialization
- 2026-08-06CVE-2026-43622CVE-2026-43622: llama.cpp double free vulnerability in LLaMA-Android2 Discloseddouble-free
- 2026-08-06CVE-2026-70639Null Pointer Dereference in LLaMA-Android JNI Wrapper2 Disclosednull-pointer-dereference · denial-of-service
- 2026-08-06CVE-2026-43627Integer Overflow in llama.cpp llama_batch_init2 Disclosedinteger-overflow · heap-corruption
- 2026-08-06CVE-2026-43630Out-of-Bounds Read in llama.cpp Slot Save Directory2 Disclosedout-of-bounds-read · information-disclosure
- 2026-08-06
- 2026-08-06CVE-2026-70640CVE-2026-70640: Race condition use-after-free in LLaMA-Android JNI wrapper2 Discloseduse-after-free · llama.cpp
- 2026-08-06CVE-2026-43628CVE-2026-43628: Integer underflow in llama.cpp DRY sampler causes denial of service2 Disclosedinteger-underflow · llama.cpp
- 2026-08-06CVE-2026-43629CVE-2026-43629: Heap buffer overflow in llama.cpp KV cache state restore2 Disclosedheap-buffer-overflow · llama.cpp
- 2026-08-06CVE-2026-70638CVE-2026-70638: Integer overflow vulnerability in LLaMA-Android JNI wrapper2 Disclosedinteger-overflow · llama.cpp
- 2026-08-06CVE-2026-43632CVE-2026-43632: Use-after-free vulnerability in llama-server tokenization endpoints2 Discloseduse-after-free · llama.cpp
- 2026-08-03CVE-2026-18581CVE-2026-18581: Reachable assertion vulnerability in llama.cpp parser2 Disclosedllama.cpp · denial-of-service
- 2026-07-27CVE-2026-17500CVE-2026-17500: Null pointer dereference in llama.cpp JSON-Schema-to-GBNF2 Disclosedinfra_vuln
- 2026-07-27CVE-2026-17501CVE-2026-17501: Uncontrolled recursion flaw in llama.cpp JSON-Schema-to-GBNF2 Disclosedinfra_vuln
- 2026-04-01
- 2026-03-24CVE-2026-33298CVE-2026-33298: Integer overflow in llama.cpp allows remote code execution2 Disclosedrce · buffer-overflow
- 2026-03-12CVE-2026-27940CVE-2026-27940: Integer overflow in llama.cpp gguf parser2 Disclosedheap-overflow · integer-overflow
- 2026-02-06CVE-2026-2069CVE-2026-2069: Llama.cpp Stack-Based Buffer Overflow in Grammar Handler2 Disclosedllama.cpp · buffer-overflow
- 2026-01-08CVE-2026-21869Llama.cpp Completion Endpoint Memory Corruption Vulnerability2 Disclosedmemory_corruption · rce
- 2025-07-10CVE-2025-53630Integer Overflow Vulnerability in llama.cpp2 Disclosedheap-overflow · integer-overflow
- 2025-06-24CVE-2025-52566CVE-2025-52566: llama.cpp Tokenizer Integer Overflow Vulnerability2 Disclosedinteger_overflow · llama.cpp
- 2025-06-17CVE-2025-49847CVE-2025-49847: Buffer overflow in llama.cpp vocabulary loading2 Disclosedbuffer-overflow · llama.cpp · gguf
- 2024-08-12CVE-2024-42478CVE-2024-42478: Arbitrary address read vulnerability in llama.cpp2 Disclosedllama.cpp · memory-corruption
- 2024-08-12CVE-2024-42479CVE-2024-42479: Arbitrary address write vulnerability in llama.cpp2 Disclosedllama.cpp · memory-corruption
- 2024-08-12CVE-2024-42477CVE-2024-42477: Global buffer overflow in llama.cpp RPC tensor handling2 Disclosedbuffer-overflow · llama.cpp
- 2024-07-22CVE-2024-41130CVE-2024-41130: Null pointer dereference vulnerability in llama.cpp2 Disclosedllm · inference-engine
- 2024-04-26CVE-2024-32878CVE-2024-32878: Llama.cpp heap uninitialized variable vulnerability2 Disclosedrce · dos · infra_vuln
- 2024-02-26
- 2024-02-26
- 2024-02-26CVE-2024-23496Heap-based buffer overflow in llama.cpp gguf_fread_str2 Disclosedbuffer-overflow · gguf
- 2024-02-26CVE-2024-21836CVE-2024-21836: llama.cpp heap-based buffer overflow in tensor headers2 Disclosedbuffer-overflow · llama.cpp
- 2024-02-26CVE-2024-21825CVE-2024-21825: llama.cpp heap-based buffer overflow in GGUF parsing2 Disclosedbuffer-overflow · llama.cpp
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.