llama.cpp MTMD GGUF parsing integer overflow enables RCE (CVE-2026-126976)
Original title: ZDI-26-954: llama.cpp MTMD Multimodal GGUF File Parsing Integer Overflow Remote Code Execution Vulnerability
A user must open a malicious multimodal GGUF file; ZDI assigned the flaw CVSS 7.0.
ZDI published ZDI-26-954, an integer overflow in llama.cpp MTMD multimodal GGUF file parsing tracked as CVE-2026-126976. Remote attackers can execute arbitrary code on affected llama.cpp installations if a user opens a malicious file. ZDI assigned CVSS 7.0. No versions, fix, or exploitation details are given.
Unconfirmed: Affected versions, fixes, and exploitation status are not stated.
- ZDI advisory ID is ZDI-26-954.
- Assigned CVE is CVE-2026-126976.
- The bug is in MTMD multimodal GGUF parsing.
- Exploitation requires opening a malicious file.
Impact: arbitrary code execution after opening a file
| Product | Affected |
|---|---|
| llama.cpp | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-126976 | — | — | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of llama. cpp. User interaction is required to exploit this vulnerability in that the target must open a malicious file.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.