Cpe:2.3:a:ggml-Org:llama.cpp:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3aggml-orgllama.cpp/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 28 Oct 2026 04:39:18 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgllama.cpp: Unauthenticated remote code execution in ggml-rpc RDMA transport (CVE-2026-118375)https://feed.craftedsignal.io/briefs/2026-10-llama-cpp-overflow/Wed, 28 Oct 2026 04:39:18 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-llama-cpp-overflow/An unauthenticated stack-based buffer overflow vulnerability in the ggml-rpc RDMA transport of llama.cpp versions prior to b11865 allows remote code execution via a malicious RDMA HELLO message.A stack-based buffer overflow exists in the rdma_recv() function of the ggml-rpc RDMA transport in llama.cpp versions prior to b11865. The vulnerability occurs because the rpc_serve_client() function fails to safely handle data when an attacker advertises RDMA capabilities within a crafted HELLO message. An unauthenticated remote attacker can overflow a 1-byte stack variable with up to 256 KiB of data, leading to a service crash or potential remote code execution.

Impact

Successful exploitation allows for unauthenticated remote code execution in the context of the llama.cpp service, or service denial via application crash.

Recommendation

  • Patch llama.cpp by updating to version b11865 or later immediately.
  • Disable RDMA capabilities for the ggml-rpc service if network transport is not required in your environment.
  • Audit network logs for connections to the llama.cpp RPC port originating from untrusted network segments.
]]>criticaladvisory