Llama.cpp (B5899 <= Version < B10261) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/llama.cpp-b5899--version--b10261/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioTue, 27 Oct 2026 01:52:36 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgllama.cpp: Heap out-of-bounds write in llm_tokenizer_plamo2 (CVE-2026-116816)https://feed.craftedsignal.io/briefs/2026-10-llama-cpp-heap-overflow/Tue, 27 Oct 2026 01:52:36 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-llama-cpp-heap-overflow/A heap out-of-bounds write vulnerability in llama.cpp versions b5899 through b10260 allows attackers to achieve memory corruption or potential code execution via maliciously crafted GGUF model files.The llama.cpp library contains a heap out-of-bounds write vulnerability within the llm_tokenizer_plamo2::build function. An attacker can supply a crafted GGUF model file containing BYTE-typed token text with negative parsed values (e.g., <0x-1>). When the model is loaded, the application attempts to write token IDs into memory before the intended bytes_ buffer, resulting in heap corruption.

Impact

Successful exploitation may lead to application crashes or arbitrary code execution within the context of the llama.cpp process. The impact depends on the environment in which the model is being loaded.

Recommendation

  • Update llama.cpp to version b10261 or later immediately to incorporate the patch for CVE-2026-116816.
  • Implement strict input validation or sandboxing for GGUF model files loaded from untrusted sources.
  • Audit environments that ingest arbitrary GGUF models for unauthorized or unexpected process crashes, which may indicate exploitation attempts.
]]>highadvisoryheap-overflowvulnerabilitycode-execution