g
ggml
Security Risk Profile
60
/100
highSecurity Risk Score
Comprehensive risk assessment based on 28 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 26, 2024 to present
28
Total CVEs
25
Critical+High
0
Exploited
13
Unpatched
Threat Assessment
Avg CVSS
8.6
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
60/100
high
Severity Distribution
Critical
12High
13Medium
3Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
7Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
10
2
Integer Overflow
9
3
Use After Free
3
4
Race Condition
3
5
Null Pointer Dereference
3
Most Affected Products
1. ggml llama.cpp28
2. llama.cpp13
3. Llama.cpp llama.cpp4
4. Llama llama.cpp3
5. llama.cpp GGUF library2
Recent Vulnerabilities
See more →CVE-2026-52130
CVSS 7.5high
Sep 1, 2026🔧 No Patch
CVE-2026-52131
CVSS 7.5high
Sep 1, 2026🔧 No Patch
CVE-2026-52132
CVSS 7.5high
Sep 1, 2026🔧 No Patch
CVE-2026-43632
CVSS 9.2critical
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints
Aug 6, 2026🔧 No Patch
CVE-2026-43631
CVSS 9.2critical
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server
Aug 6, 2026🔧 No Patch
CVE-2026-43630
CVSS 6.3medium
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure
Aug 6, 2026
CVE-2026-43629
CVSS 9.2critical
llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore
Aug 6, 2026
CVE-2026-43628
CVSS 8.5high
llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
Aug 6, 2026
CVE-2026-43627
CVSS 8.5high
llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function
Aug 6, 2026
CVE-2026-70640
CVSS 7.3high
llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp
Aug 6, 2026
Monitor ggml in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.