CVE-2026-116840

MEDIUM 6.1CVE-2026-116840 · Published 27/10/2026 · updated 27/10/2026

In short

CVE-2026-116840 is a MEDIUM (CVSS 6.1) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.13%, higher than 2.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.

References

ggml-org/llama.cpp
ggml-org/llama.cpp commit a6ea155
ggml-org/llama.cpp
ggml-org/llama.cpp#26979
ggml-org/llama.cpp release b11275
vulncheck.com/advisories/llama-cpp-b5854-before-b11275-integer-overflow-in-gguf-init-from-reader

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free