Ggml-org vulnerabilities
40 CVEs and advisories name Ggml-org as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-10298ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference
- CVE-2026-34159llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
- CVE-2026-33298llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing
- CVE-2026-27940llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix
- CVE-2026-2069ggml-org llama.cpp GBNF Grammar llama-grammar.cpp llama_grammar_advance_stack stack-based overflow
- CVE-2026-21869llama.cpp has Out-of-bounds Write in llama-server
- CVE-2025-14569ggml-org whisper.cpp common-whisper.cpp read_audio_data use after free
- CVE-2025-53630Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf
- CVE-2025-52566llama.cpp tokenizer signed vs. unsigned heap overflow
- CVE-2025-49847llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model