Medium 6.1Published Oct 26, 2026

CVE-2024-58399llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets

Updated under an hour ago (Oct 28, 2026, 6:00 PM ET)

Does this affect you?

It affects ggml-org llama.cpp. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for ggml-org llama.cpp

Exploited in the last 30 days

llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.

CVSS: 6.1 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H
Weakness (CWE): CWE-125
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: VulnCheck
NVD analysis: Awaiting Analysis
Record last updated: Oct 26, 2026
First seen by InfoSec Signals: Oct 26, 2026

Affected products

Affected products

ggml-org llama.cpp ggml_org:llama.cpp (from the name)	from b1046 before b2731	CNA record

References

References

https://github.com/ggml-org/llama.cpp/issues/6774	issue-tracking
https://github.com/ggml-org/llama.cpp/pull/6885	patch, issue-tracking
https://github.com/ggml-org/llama.cpp/commit/0ead1f1072fdc70720f92e008a294dc74a826b1d	patch
https://github.com/ggml-org/llama.cpp/blob/b2730/llama.cpp#L3002-L3004	technical-description
https://github.com/ggml-org/llama.cpp/releases/tag/b2731	release-notes
https://www.vulncheck.com/advisories/llama-cpp-before-b2731-out-of-bounds-read-via-gguf-tensor-offsets	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.