CVE-2026-118375— llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()
Quick assessment
Affected
ggml-org llama.cpp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 b11865 版本之前的 llama.cpp b8841 版本中，ggml-rpc 的 RDMA 传输层函数 存在一个越界写入漏洞。该漏洞允许未认证的客户端在 HELLO 消息中宣称具备 RDMA 能力，从而向 中的一个 1 字节栈变量写入高达 256 KiB 的数据，导致 RPC 服务器栈溢出。攻击者可借此使服务器崩溃，或可能实现代码执行。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-118375
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
llama.cpp b8841 before b11865 Stack-based Buffer Overflow via ggml-rpc RDMA rdma_recv()
Source: CVE Program / CVE List V5
Vulnerability Description
llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows unauthenticated peers to overflow the rpc-server stack. Attackers advertising RDMA capabilities in the HELLO message can send up to 256 KiB into a 1-byte stack variable in rpc_serve_client(), crashing the server or potentially executing code.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存写
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-118375
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-118375
请登录查看更多情报信息。
Vendor Pages for CVE-2026-118375 (1)
Other References for CVE-2026-118375 (5)
IV. Related Vulnerabilities
Same product: llama.cpp
-
CVE-2026-116840
llama.cpp b5854 before b11275 Integer Overflow in gguf_init_ -
CVE-2026-116829
llama.cpp b10398 before b11301 Integer Overflow in gguf_init -
CVE-2026-116816
llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via p -
CVE-2025-71439
llama.cpp before b5649 Heap Out-of-Bounds Read via llama_voc -
CVE-2024-58399
llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Of
Same vendor: ggml-org
-
CVE-2026-116840
llama.cpp b5854 before b11275 Integer Overflow in gguf_init_ -
CVE-2026-116816
llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via p -
CVE-2026-116829
llama.cpp b10398 before b11301 Integer Overflow in gguf_init -
CVE-2025-71439
llama.cpp before b5649 Heap Out-of-Bounds Read via llama_voc -
CVE-2024-58399
llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Of
Same weakness: CWE-787
-
CVE-2026-118342
Chrome 156.0.8078.73 前编辑功能越界写漏洞 -
CVE-2026-57199
Asterisk: Asterisk app_sms.c copies externally controlled SM -
CVE-2026-57188
Asterisk: Stack buffer overflow in res_xmpp XMPP namespace p -
CVE-2026-57189
Asterisk: Possible RED T.140 Generation Accumulation OOB Wri -
CVE-2026-57201
Asterisk: Stack Buffer Overflow in H.323 ooTrace() via Unbou