Out-of-Bounds Read Vulnerability in Llama.cpp Affecting Remote Interaction
CVE-2024-58400

8.8HIGH

Key Information:

Vendor

Ggml-org

Status
Llama.cpp
Vendor
CVE Published:
27 October 2026

What is CVE-2024-58400?

The llama.cpp library before version b3701 contains a significant out-of-bounds read vulnerability in the functions llama_decode_internal and llama_encode_internal. This issue enables remote unauthenticated attackers to exploit the library by supplying unvalidated token IDs, potentially allowing them to read memory contents or crash the server process. Attackers can send integer-array prompts to the llama-server /completion endpoint that include IDs exceeding the valid range (0 to n_vocab). This vulnerability poses a serious risk of unauthorized memory access.

Affected Version(s)

llama.cpp 0

References

https://github.com/ggml-org/llama.cpp/pull/9359
patchissue-tracking
https://github.com/ggml-org/llama.cpp/commit/faf69d4237c9...
patch
https://github.com/ggml-org/llama.cpp/commit/eae597182cb6...
patch

CVSS V4

Score:
8.8
Severity:
HIGH
Confidentiality:
Low
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jeongwoo Lee
slaren
ggerganov
.