Vulnerabilities in ggml-org
10 resultsCVE-2026-34159CRITICALllama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backendEPSS 1.1%CVE-2026-33298HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor ParsingEPSS 0.5%CVE-2025-49847HIGHllama.cpp Vulnerable to Buffer Overflow via Malicious GGUF ModelEPSS 0.4%CVE-2026-21869HIGHllama.cpp has Out-of-bounds Write in llama-serverEPSS 0.4%CVE-2025-53630HIGHInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in ggufEPSS 0.3%CVE-2025-52566HIGHllama.cpp tokenizer signed vs. unsigned heap overflowEPSS 0.3%CVE-2026-27940HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 FixEPSS 0.2%CVE-2026-2069MEDIUMggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflowEPSS 0.1%CVE-2025-14569MEDIUMggml-org whisper.cpp common-whisper.cpp read_audio_data use after freeEPSS 0.1%CVE-2026-10298MEDIUMggml-org whisper.cpp ggml.c whisper_model_load null pointer dereferenceEPSS 0.1%