High 8.2Published Oct 26, 2026

CVE-2024-58400llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs

Updated under an hour ago (Oct 28, 2026, 7:30 PM ET)

Does this affect you?

It affects ggml-org llama.cpp. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.42%, higher than 36% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for ggml-org llama.cpp

Exploited in the last 30 days

llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.

CVSS: 8.2 HIGH (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Weakness (CWE): CWE-129
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.42% (percentile 36)
Assigned by: VulnCheck
NVD analysis: Awaiting Analysis
Record last updated: Oct 27, 2026
First seen by InfoSec Signals: Oct 26, 2026

Affected products

Affected products

ggml-org llama.cpp ggml_org:llama.cpp (from the name)	before b3701	CNA record

References

References

https://github.com/ggml-org/llama.cpp/pull/9359	patch, issue-tracking
https://github.com/ggml-org/llama.cpp/commit/faf69d4237c9ae4d7f572b4674d1002463e8acd3	patch
https://github.com/ggml-org/llama.cpp/commit/eae597182cb61bbde0b26e7cec5999d28b9327fe	patch
https://github.com/ggml-org/llama.cpp/blob/b3681/examples/server/server.cpp#L789	technical-description
https://github.com/ggml-org/llama.cpp/releases/tag/b3701	release-notes
https://www.vulncheck.com/advisories/llama-cpp-before-b3701-out-of-bounds-read-in-llama-decode-via-token-ids	third-party-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.