llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 4
- StatusAwaiting Analysis → PublishedNVD modified 2026-10-27 00:33
- StatusPublished → Awaiting AnalysisNVD modified 2026-10-27 15:59
- StatusReceived → PublishedNVD modified 2026-10-27 00:33
- First seenCVSS 6.9NVD modified 2026-10-27 01:19
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 6
- https://github.com/ggml-org/llama.cpp/blob/v0.5.0/ggml/src/gguf.cpp#L701
- https://github.com/ggml-org/llama.cpp/commit/2149c00f4442dc59302e134a02e4c99d5f7ed9fc
- https://github.com/ggml-org/llama.cpp/issues/29383
- https://github.com/ggml-org/llama.cpp/pull/29384
- https://github.com/ggml-org/llama.cpp/releases/tag/b11301
- https://www.vulncheck.com/advisories/llama-cpp-b10398-before-b11301-integer-overflow-in-gguf-init-from-reader