CVE-2026-116816 | ggml-org llama.cpp llm_tokenizer_plamo2 build out-of-bounds write (b10261)

A vulnerability, which was classified as critical, was found in ggml-org llama.cpp. Affected is the function llm_tokenizer_plamo2::build of the component llm_tokenizer_plamo2. Executing a manipulation can lead to out-of-bounds write.

This vulnerability is registered as CVE-2026-116816. It is possible to launch the attack remotely. No exploit is available.

It is best practice to apply a patch to resolve this issue.VulDB Recent EntriesRead More