ZeroDay Findings
Sign inSign up

Findings

CVE-2026-33298

llama.cpp is an inference of several LLM models in C/C++.

Published Mar 24, 2026 · updated Jun 17, 2026 · ggml llama.cpp

llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the function allows an attacker to bypass memory validation by crafting a GGUF file with specific tensor dimensions. This causes to return a significantly smaller size than required (e.g., 4MB instead of Exabytes), leading to a heap-based buffer overflow when the application subsequently processes the tensor. This vulnerability allows potential Remote Code Execution (RCE) via memory corruption. b7824 contains a fix.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 24, 2026 · NIST NVD

    Detected

    llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the function allows an attacker to bypass memory validation by crafting a GGUF file with specific tensor dimensions. This causes to return a significantly smaller size than required (e.g., 4MB instead of Exabytes), leading to a heap-based buffer overflow when the application subsequently

  2. Jun 17, 2026 · NIST NVD

    Updated

    llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the function allows an attacker to bypass memory validation by crafting a GGUF file with specific tensor dimensions. This causes to return a significantly smaller size than required (e.g., 4MB instead of Exabytes), leading to a heap-based buffer overflow when the application subsequently

Affected

  • cpe ggml/llama.cppversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-33298

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-33298

    llama.cpp is an inference of several LLM models in C/C++. Prior to b7824, an integer overflow vulnerability in the function allows an attacker to bypass memory validation by crafting a GGUF file with specific tensor dimensions. This causes to return a

    nvd.nist.gov

References