ggml-org llama.cpp up to 0.5.x GGUF Initialization gguf_init_from_reader integer overflow

Summaryinfo

A vulnerability identified as problematic has been detected in ggml-org llama.cpp up to 0.5.x. The affected element is the function gguf_init_from_reader of the component GGUF Initialization. The manipulation leads to integer overflow. This vulnerability is uniquely identified as CVE-2026-116840. Local access is required to approach this attack. No exploit exists. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in ggml-org llama.cpp up to 0.5.x and classified as problematic. This issue affects the function gguf_init_from_reader of the component GGUF Initialization. The manipulation with an unknown input leads to a integer overflow vulnerability. Using CWE to declare the problem leads to CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. Impacted is confidentiality, integrity, and availability. The summary by CVE is:

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.

The advisory is shared at github.com. The identification of this vulnerability is CVE-2026-116840 since 10/27/2026. The exploitation is known to be easy. An attack has to be approached locally. It demands that the victim is doing some kind of user interaction. Technical details are known, but no exploit is available.

Upgrading to version 0.6.0 eliminates this vulnerability.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• ggml-org

Name

• llama.cpp

Version

• 0.1
• 0.2
• 0.3
• 0.4
• 0.5

Website

• Product: https://github.com/ggml-org/llama.cpp/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion