Vulnerabilities in ggml-org
25 resultsVexday analysis
O fornecedor ggml-org apresenta 14 vulnerabilidades cadastradas, com 1 crítica (CVSS) e nenhuma em exploração ativa conhecida, reduzindo o risco imediato. A fraqueza dominante é CWE-119 (improper restriction of operations within bounds of memory buffer), típica de software de baixo nível. O ritmo de descobertas permanece ativo, com 5 vulnerabilidades publicadas nos últimos 90 dias, sinalizando uso intenso ou auditoria contínua do código.
CVE-2026-34159CRITICALllama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backendEPSS 1.1%CVE-2026-43629CRITICALllama.cpp b4882–b9058 Buffer Overflow in KV Cache State RestoreEPSS 0.6%CVE-2026-33298HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor ParsingEPSS 0.5%CVE-2026-43630MEDIUMllama.cpp b5702–b7653 Out-of-Bounds Read Information DisclosureEPSS 0.5%CVE-2026-21869HIGHllama.cpp has Out-of-bounds Write in llama-serverEPSS 0.4%CVE-2025-49847HIGHllama.cpp Vulnerable to Buffer Overflow via Malicious GGUF ModelEPSS 0.4%CVE-2026-17501MEDIUMggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionEPSS 0.4%CVE-2026-17500MEDIUMggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereferenceEPSS 0.4%CVE-2026-43631CRITICALllama.cpp b7492–b9060 Use-After-Free RCE via llama-serverEPSS 0.4%CVE-2026-43632CRITICALllama.cpp b7492–b9060 Use-After-Free in Tokenization EndpointsEPSS 0.3%CVE-2025-52566HIGHllama.cpp tokenizer signed vs. unsigned heap overflowEPSS 0.3%CVE-2025-53630HIGHInteger Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in ggufEPSS 0.3%CVE-2026-43628HIGHllama.cpp b3978–b9058 Integer Underflow via DRY SamplerEPSS 0.2%CVE-2026-27940HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 FixEPSS 0.2%CVE-2026-70640HIGHllama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cppEPSS 0.2%CVE-2026-43627HIGHllama.cpp b1283–b9058 Integer Overflow in llama_batch_init() FunctionEPSS 0.1%CVE-2026-70638HIGHllama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cppEPSS 0.1%CVE-2025-14569MEDIUMggml-org whisper.cpp common-whisper.cpp read_audio_data use after freeEPSS 0.1%CVE-2026-43622HIGHllama.cpp b1886–b7445 Double Free via llama-android.cppEPSS 0.1%CVE-2026-70639MEDIUMllama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cppEPSS 0.1%