https://seclists.org/oss-sec/2026/q2/546: Security Advisory: Multiple Vulnerabilities in llama.cpp GGUF Format Parsers
Published May 15, 2026
·Updated
Affected Software
2 affected components
ggml-org llama.cpp>=GGUF v3
ggml-org gguf-py>=0
Frequently Asked Questions
1
What is the severity of CVE-2026-XXXX?
The severity of CVE-2026-XXXX is classified as Critical, High, or Medium depending on the specific vulnerability.
2
How do I fix CVE-2026-XXXX?
To fix CVE-2026-XXXX, update the llama.cpp library to the latest version provided in the repository.
3
Which versions of llama.cpp are affected by CVE-2026-XXXX?
CVE-2026-XXXX affects all versions of llama.cpp that implement the GGUF format parser.
4
What type of vulnerabilities are present in CVE-2026-XXXX?
CVE-2026-XXXX includes multiple security vulnerabilities that can potentially lead to code execution or denial of service.
5
Where can I find the repository for llama.cpp related to CVE-2026-XXXX?
The repository for llama.cpp can be found on GitHub under the ggml-org account.