CVE-2026-116840 | ggml-org llama.cpp up to 0.5.x GGUF Initialization gguf_init_from_reader integer overflow

SecurityVulns
Yanac

A vulnerability categorized as problematic has been discovered in ggml-org llama.cpp up to 0.5.x. Impacted is the function gguf_init_from_reader of the component GGUF Initialization. Executing a manipulation can lead to integer overflow.

This vulnerability is handled as CVE-2026-116840. It is possible to launch the attack on the local host. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More