CVE-2026-116840— llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader

Quick assessment

Affected

ggml-org llama.cpp

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 b11275 之前的 llama.cpp b5854 版本中，函数存在整数溢出漏洞。当张量大小接近时，该漏洞会绕过 CVE-2025-53630 中的尺寸检查。攻击者可构造一个特殊的 GGUF 文件，使其张量大小在填充后变为零，从而导致数据块过小，并引发下游消费者出现越界读取问题。

CVSS 6.1 · Medium Updated Oct 27, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader

Source: CVE Program / CVE List V5

Vulnerability Description

llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.

Source: CVE Program / CVE List V5

CVSS Information

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H

Source: CVE Program / CVE List V5

Vulnerability Type

整数溢出或超界折返

Source: CVE Program / CVE List V5

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
ggml-org	llama.cpp	b5854 ~ b11275	-

II. Public POCs for CVE-2026-116840

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-116840

请登录查看更多情报信息。

Other References for CVE-2026-116840 (6)

https://github.com/ggml-org/llama.cpp/blob/v0.5.0/ggml/src/gguf.cpp#L794-L795 technical-description
https://github.com/ggml-org/llama.cpp/commit/a6ea155d3d38b3f6f43d0c0dc29c2d592413ef44 patch
https://github.com/ggml-org/llama.cpp/pull/26979 patch issue-tracking
https://github.com/ggml-org/llama.cpp/issues/26978 issue-tracking
https://github.com/ggml-org/llama.cpp/releases/tag/b11275 release-notes
https://www.vulncheck.com/advisories/llama-cpp-b5854-before-b11275-integer-overflow-in-gguf-init-from-reader third-party-advisory

https://www.cve.org/CVERecord?id=CVE-2026-116840

Same Patch Batch · ggml-org · 2026-10-27 · 6 CVEs total

CVE-2024-58400	8.2 HIGH	llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs
CVE-2026-116816	7.8 HIGH	llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer
CVE-2026-116829	6.6 MEDIUM	llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader
CVE-2024-58399	6.1 MEDIUM	llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets
CVE-2025-71439	5.5 MEDIUM	llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info

IV. Related Vulnerabilities

Same product: llama.cpp

Same vendor: ggml-org

Same weakness: CWE-190