5.3Mittel
CVE-2026-116467ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion
Beschreibung
A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The project was informed of the problem early through a pull request but has not reacted yet.
Schwachstellentyp (CWE):
CWE-617
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- VDB-426361 | ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion vdb-entry
- VDB-426361 | CTI Indicators (IOB, IOC, IOA) signature
- CVE-2026-116467 | CVE Analysis and Report third-party-advisory
- Submit #1013917 | ggml-org llama.cpp 2ed93db47 and earlier (fixed in PR #29992) CWE-617 (Reachable Assertion) third-party-advisory
- https://github.com/ggml-org/llama.cpp/pull/29992 issue-trackingpatch
- https://github.com/ggml-org/llama.cpp/ product