DEBIAN-CVE-2026-119052: High severity debian/llama.cpp vulnerability

Published Oct 29, 2026

Updated

llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SETTENSOR with a length above std::vector::maxsize(), triggering an uncaught std::lengtherror that aborts the process and denies service to all clients.

Affected Software

1 affected component

debian/llama.cpp*

Event History

Oct 29, 2026

CVE Published

via OSV·02:17 PM

Data Sourced

via OSV·02:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which llama.cpp builds are in the affected range?

The affected range is b2877 through versions before b11935. Builds at or after b11935 are not identified as affected by the provided data.

Does an attacker need credentials or user interaction to trigger the issue?

No. An unauthenticated remote attacker can trigger the condition after completing the HELLO handshake, with no user interaction required.

What service availability impact should be expected if exploitation succeeds?

The ggml-rpc server process aborts due to an uncaught std::length_error. This denies service to all clients using that rpc-server.

DEBIAN-CVE-2026-119052: High severity debian/llama.cpp vulnerability

Affected Software

Event History

Frequently Asked Questions

Which llama.cpp builds are in the affected range?

Does an attacker need credentials or user interaction to trigger the issue?

What service availability impact should be expected if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which llama.cpp builds are in the affected range?

Does an attacker need credentials or user interaction to trigger the issue?

What service availability impact should be expected if exploitation succeeds?