llama.cpp GGUF parsing heap overflow can run remote code
Original title: ZDI-26-976: llama.cpp GGUF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
ZDI rates it 7.8; a user must open a malicious file or page. CVE-2026-126975.
ZDI-26-976 says a heap-based buffer overflow in llama.cpp GGUF file parsing lets remote attackers execute arbitrary code. Exploitation requires the target to visit a malicious page or open a malicious file. ZDI assigned CVSS 7.8 and CVE-2026-126975. No affected or fixed version is given in the advisory snippet.
Unconfirmed: Affected and fixed versions are not stated in the advisory text.
- Advisory ID is ZDI-26-976.
- The flaw is in GGUF file parsing.
- User interaction is required.
- No patched llama.cpp version is stated.
Impact: remote code execution after opening a malicious file
| Product | Affected |
|---|---|
| llama.cpp | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-126975 | — | — | — |
From the original article
This vulnerability allows remote attackers to execute arbitrary code on affected installations of llama. cpp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.
zerodayinitiative.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.