Known Vulnerabilities for products from Ggml
Listed below are 15 of the newest known vulnerabilities associated with the vendor "Ggml".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-86317 json | Not Provided | 2026-09-07 | 2026-09-08 | |
| CVE-2026-86289 json | Not Provided | 2026-09-07 | 2026-09-11 | |
| CVE-2026-78148 json | Not Provided | 2026-08-24 | 2026-08-24 | |
| CVE-2026-78147 json | Not Provided | 2026-08-23 | 2026-08-27 | |
| CVE-2026-52132 json | llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of servic... | Not Provided | 2026-09-01 | 2026-09-04 |
| CVE-2026-52131 json | llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function. | Not Provided | 2026-09-01 | 2026-09-04 |
| CVE-2026-52130 json | llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denia... | Not Provided | 2026-09-01 | 2026-09-04 |
| CVE-2026-43622 json | llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() ... | Not Provided | 2026-08-06 | 2026-09-04 |
| CVE-2026-34159 json | llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skip... | Not Provided | 2026-04-01 | 2026-04-30 |
| CVE-2026-33298 json | llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the `ggml_nbyt... | Not Provided | 2026-03-24 | 2026-04-30 |
| CVE-2026-27940 json | llama.cpp is an inference of several LLM models in C/C++. Prior to b8146, the gguf_init_from_file_impl() in gguf.cpp is vulne... | Not Provided | 2026-03-12 | 2026-04-28 |
| CVE-2026-18581 json | Not Provided | 2026-08-03 | 2026-08-03 | |
| CVE-2026-17513 json | Not Provided | 2026-07-27 | 2026-07-27 | |
| CVE-2026-17512 json | Not Provided | 2026-07-27 | 2026-07-27 | |
| CVE-2026-17501 json | Not Provided | 2026-07-27 | 2026-07-29 | |
| CVE-2026-17500 json | Not Provided | 2026-07-27 | 2026-07-27 | |
| CVE-2024-42479 json | llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary... | Not Provided | 2024-08-12 | 2026-04-27 |
| CVE-2024-42478 json | llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary... | Not Provided | 2024-08-12 | 2026-04-27 |
| CVE-2024-42477 json | llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-ov... | Not Provided | 2024-08-12 | 2026-04-27 |
| CVE-2024-23605 json | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. ... | Not Provided | 2024-02-26 | 2026-04-27 |