ggml kayıtları
ggml üreticisine ait 29 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 5
- Düzeltme kaydı olan
- %41,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-190 Integer Overflow or Wraparound6
- CWE-122 Heap-based Buffer Overflow4
- CWE-125 Out-of-bounds Read4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')2
- CWE-476 NULL Pointer Dereference2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
29 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2024-42479İstismar yok | llama.cpp allows write-what-where in rpc_server::set_tensorggml · llama.cpp · CWE-123 | Kritik9,8 | — | %2,6 | 12 Ağu 2024 |
39İzleyin | CVE-2024-21802İstismar yok | A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17.ggml · llama.cpp · CWE-122 | Kritik9,8 | — | %1,4 | 26 Şub 2024 |
39İzleyin | CVE-2024-21836İstismar yok | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17.ggml · llama.cpp · CWE-190 | Kritik9,8 | — | %1,3 | 26 Şub 2024 |
39İzleyin | CVE-2024-23496İstismar yok | A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17.ggml · llama.cpp · CWE-190 | Kritik9,8 | — | %1,3 | 26 Şub 2024 |
39İzleyin | CVE-2024-23605İstismar yok | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17.ggml · llama.cpp · CWE-190 | Kritik9,8 | — | %1,3 | 26 Şub 2024 |
39İzleyin | CVE-2024-21825İstismar yok | A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Coggml · llama.cpp · CWE-190 | Kritik9,8 | — | %1,3 | 26 Şub 2024 |
39İzleyin | CVE-2026-34159Kavram kanıtı | llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backendggml · llama.cpp · CWE-119 | Kritik9,8 | — | %1,2 | 1 Nis 2026 |
39İzleyin | CVE-2024-42478İstismar yok | llama.cpp allows Arbitrary Address Read in rpc_server::get_tensorggml · llama.cpp · CWE-125 | Kritik9,8 | — | %0,6 | 12 Ağu 2024 |
39İzleyin | CVE-2026-21869İstismar yok | llama.cpp has Out-of-bounds Write in llama-serverggml · llama.cpp · CWE-787 | Kritik9,8 | — | %0,5 | 7 Oca 2026 |
36İzleyin | CVE-2026-43629İstismar yok | llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restoreggml · llama.cpp · CWE-190 | Kritik9,2 | — | %0,7 | 6 Ağu 2026 |
36İzleyin | CVE-2026-43631İstismar yok | llama.cpp b7492–b9060 Use-After-Free RCE via llama-serverggml · llama.cpp · CWE-362 | Kritik9,2 | — | %0,6 | 6 Ağu 2026 |
36İzleyin | CVE-2026-43632İstismar yok | llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpointsggml · llama.cpp · CWE-367 | Kritik9,2 | — | %0,5 | 6 Ağu 2026 |
35İzleyin | CVE-2024-32878İstismar yok | Use of Uninitialized Variable Vulnerability in llama.cppggml · llama.cpp · CWE-456 | Yüksek8,8 | — | %0,7 | 26 Nis 2024 |
35İzleyin | CVE-2025-49847İstismar yok | llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Modelggml · llama.cpp · CWE-119 | Yüksek8,8 | — | %0,5 | 17 Haz 2025 |
35İzleyin | CVE-2025-52566İstismar yok | llama.cpp tokenizer signed vs. unsigned heap overflowggml · llama.cpp · CWE-119 | Yüksek8,8 | — | %0,4 | 24 Haz 2025 |
34İzleyin | CVE-2026-43628İstismar yok | llama.cpp b3978–b9058 Integer Underflow via DRY Samplerggml · llama.cpp · CWE-125 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
34İzleyin | CVE-2026-43622İstismar yok | llama.cpp b1886–b7445 Double Free via llama-android.cppggml · llama.cpp · CWE-415 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
34İzleyin | CVE-2026-70638Kavram kanıtı | llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cppggml · llama.cpp · CWE-122 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
34İzleyin | CVE-2026-43627İstismar yok | llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Functionggml · llama.cpp · CWE-190 | Yüksek8,5 | — | %0,2 | 6 Ağu 2026 |
31İzleyin | CVE-2026-33298İstismar yok | llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsingggml · llama.cpp · CWE-122 | Yüksek7,8 | — | %0,4 | 23 Mar 2026 |
31İzleyin | CVE-2026-27940Kavram kanıtı | llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fixggml · llama.cpp · CWE-122 | Yüksek7,8 | — | %0,2 | 12 Mar 2026 |
30İzleyin | CVE-2026-52132İstismar yok | llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_allggml · llama.cpp · CWE-674 | Yüksek7,5 | — | %0,6 | 1 Eyl 2026 |
30İzleyin | CVE-2026-52130İstismar yok | llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.ggml · llama.cpp · CWE-674 | Yüksek7,5 | — | %0,5 | 1 Eyl 2026 |
30İzleyin | CVE-2024-42477İstismar yok | llama.cpp global-buffer-overflow in ggml_type_sizeggml · llama.cpp · CWE-125 | Yüksek7,5 | — | %0,5 | 12 Ağu 2024 |
30İzleyin | CVE-2026-52131İstismar yok | llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.ggml · llama.cpp · CWE-617 | Yüksek7,5 | — | %0,4 | 1 Eyl 2026 |
- CVE-2024-4247940Planlayın
llama.cpp allows write-what-where in rpc_server::set_tensor
KritikCVSS 9,8İstismar yokEPSS %3ggml · llama.cpp12 Ağu 2024
- CVE-2024-2180239İzleyin
A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17.
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp26 Şub 2024
- CVE-2024-2183639İzleyin
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17.
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp26 Şub 2024
- CVE-2024-2349639İzleyin
A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17.
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp26 Şub 2024
- CVE-2024-2360539İzleyin
A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17.
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp26 Şub 2024
- CVE-2024-2182539İzleyin
A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Co
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp26 Şub 2024
- CVE-2026-3415939İzleyin
llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
KritikCVSS 9,8Kavram kanıtıEPSS %1ggml · llama.cpp1 Nis 2026
- CVE-2024-4247839İzleyin
llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp12 Ağu 2024
- CVE-2026-2186939İzleyin
llama.cpp has Out-of-bounds Write in llama-server
KritikCVSS 9,8İstismar yokEPSS %1ggml · llama.cpp7 Oca 2026
- CVE-2026-4362936İzleyin
llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore
KritikCVSS 9,2İstismar yokEPSS %1ggml · llama.cpp6 Ağu 2026
- CVE-2026-4363136İzleyin
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server
KritikCVSS 9,2İstismar yokEPSS %1ggml · llama.cpp6 Ağu 2026
- CVE-2026-4363236İzleyin
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints
KritikCVSS 9,2İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2024-3287835İzleyin
Use of Uninitialized Variable Vulnerability in llama.cpp
YüksekCVSS 8,8İstismar yokEPSS %1ggml · llama.cpp26 Nis 2024
- CVE-2025-4984735İzleyin
llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model
YüksekCVSS 8,8İstismar yokEPSS %1ggml · llama.cpp17 Haz 2025
- CVE-2025-5256635İzleyin
llama.cpp tokenizer signed vs. unsigned heap overflow
YüksekCVSS 8,8İstismar yokEPSS %0ggml · llama.cpp24 Haz 2025
- CVE-2026-4362834İzleyin
llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
YüksekCVSS 8,5İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4362234İzleyin
llama.cpp b1886–b7445 Double Free via llama-android.cpp
YüksekCVSS 8,5İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-7063834İzleyin
llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp
YüksekCVSS 8,5Kavram kanıtıEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-4362734İzleyin
llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function
YüksekCVSS 8,5İstismar yokEPSS %0ggml · llama.cpp6 Ağu 2026
- CVE-2026-3329831İzleyin
llama.cpp has a Heap Buffer Overflow via Integer Overflow in GGUF Tensor Parsing
YüksekCVSS 7,8İstismar yokEPSS %0ggml · llama.cpp23 Mar 2026
- CVE-2026-2794031İzleyin
llama.cpp has a Heap Buffer Overflow via Integer Overflow in `mem_size` Calculation — Bypass of CVE-2025-53630 Fix
YüksekCVSS 7,8Kavram kanıtıEPSS %0ggml · llama.cpp12 Mar 2026
- CVE-2026-5213230İzleyin
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_all
YüksekCVSS 7,5İstismar yokEPSS %1ggml · llama.cpp1 Eyl 2026
- CVE-2026-5213030İzleyin
llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.
YüksekCVSS 7,5İstismar yokEPSS %0ggml · llama.cpp1 Eyl 2026
- CVE-2024-4247730İzleyin
llama.cpp global-buffer-overflow in ggml_type_size
YüksekCVSS 7,5İstismar yokEPSS %0ggml · llama.cpp12 Ağu 2024
- CVE-2026-5213130İzleyin
llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
YüksekCVSS 7,5İstismar yokEPSS %0ggml · llama.cpp1 Eyl 2026