Linux Distros Unpatched Vulnerability : CVE-2025-71439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversize...

Linux Distros Unpatched Vulnerability : CVE-2024-58400

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers ...

CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

UBUNTU-CVE-2024-58400

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with...

UBUNTU-CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2025-71439 llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

EUVD-2025-211201

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2025-71439

Versions of llama.cpp before b5649 are vulnerable to a heap out-of-bounds read in llama_vocab::impl::print_info(). An attacker can crash llama-cli or llama-server during model loading by providing a crafted GGUF model with an oversized special token ID and a short tokenizer.ggml.tokens array, for...

CVE-2024-58400 llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with...

CVE-2024-58400 llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with...

CVE-2024-58400 llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llamadecodeinternal and llamaencodeinternal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with...

CVE-2024-58400

Versions of llama.cpp prior to b3701 are susceptible to an out-of-bounds read vulnerability within the llama_decode_internal and llama_encode_internal functions. This flaw is caused by a lack of validation on token IDs; remote unauthenticated attackers can exploit this by sending integer-array pr...

CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

CVE-2025-71439 llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

PT-2026-125541

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama decode internal and llama encode internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint...

PT-2026-125542

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama vocab::impl::print info that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or...

CVE-2025-71439

llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...

SUSE CVE-2026-107183

llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling currenttool pointer. Attackers can submit a chatparser in a POST /completion request emitting a tool-id...

Linux Distros Unpatched Vulnerability : CVE-2026-107183

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to...

DEBIAN-CVE-2026-107183

llama.cpp before b11393 contains a use-after-free and double free vulnerability in commonchatpegmapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling currenttool pointer. Attackers can submit a chatparser in a POST /completion request emitting a tool-id...