Vulnerabilidades em ggml-org
40 resultadosAnálise Vexday
O fornecedor ggml-org apresenta 14 vulnerabilidades cadastradas, com 1 crítica (CVSS) e nenhuma em exploração ativa conhecida, reduzindo o risco imediato. A fraqueza dominante é CWE-119 (improper restriction of operations within bounds of memory buffer), típica de software de baixo nível. O ritmo de descobertas permanece ativo, com 5 vulnerabilidades publicadas nos últimos 90 dias, sinalizando uso intenso ou auditoria contínua do código.
CVE-2026-70640HIGHllama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cppEPSS 0.2%CVE-2026-43628HIGHllama.cpp b3978–b9058 Integer Underflow via DRY SamplerEPSS 0.2%CVE-2026-70638HIGHllama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cppEPSS 0.2%CVE-2026-43622HIGHllama.cpp b1886–b7445 Double Free via llama-android.cppEPSS 0.2%CVE-2026-27940HIGHllama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 FixEPSS 0.2%CVE-2026-43627HIGHllama.cpp b1283–b9058 Integer Overflow in llama_batch_init() FunctionEPSS 0.2%CVE-2026-70639MEDIUMllama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cppEPSS 0.2%CVE-2026-17512MEDIUMggml-org whisper.cpp log_mel_spectrogram out-of-boundsEPSS 0.2%CVE-2026-18581MEDIUMggml-org llama.cpp Jinja Minja Template parser.cpp assertionEPSS 0.2%CVE-2026-17513MEDIUMggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertionEPSS 0.2%CVE-2026-2069MEDIUMggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflowEPSS 0.1%CVE-2025-14569MEDIUMggml-org whisper.cpp common-whisper.cpp read_audio_data use after freeEPSS 0.1%CVE-2026-116816HIGHllama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 TokenizerEPSS 0.1%CVE-2026-116840MEDIUMllama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_readerEPSS 0.1%CVE-2026-116829MEDIUMllama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_readerEPSS 0.1%CVE-2026-116096MEDIUMggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds writeEPSS 0.1%CVE-2025-71439MEDIUMllama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_infoEPSS 0.1%CVE-2024-58399MEDIUMllama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor OffsetsEPSS 0.1%CVE-2026-110810LOWggml-org whisper.cpp Model Loader whisper_model_load out-of-boundsEPSS 0.1%CVE-2026-10298MEDIUMggml-org whisper.cpp ggml.c whisper_model_load null pointer dereferenceEPSS 0.1%