Vulnerability-Lookup

CVE-2026-116096 (GCVE-0-2026-116096)

Vulnerability from cvelistv5 – Published: 2026-10-25 23:00 – Updated: 2026-10-26 16:38 X_Open Source

Title

ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write

Summary

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out‑of‑bounds write (gen‑audio / pocket‑tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release‑active GGML_ASSERT and aborts. But the submitter's recommended by‑construction fix (PR #29360 "prevent OOB accesses from malformed mmproj files") is still open. So the root cause is detected‑and‑aborted, not prevented‑by‑design.

Severity

4.8 (Medium)


                        
                          CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

5.3 (Medium)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

5.3 (Medium)


                        
                          CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

SSVC

Exploitation: poc Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-10-26 15:59 UTC

CWE

CWE-787 - Out-of-bounds Write
CWE-119 - Memory Corruption

Assigner

VulDB CNA under the mitre root

CNA scorecard B 83/100 over 3873 records in the last 180 days details

References

10 references

URL	Tags
https://vuldb.com/vuln/426164	vdb-entrytechnical-description
https://vuldb.com/vuln/426164/cti	signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116096	third-party-advisory
https://vuldb.com/submit/1000891	third-party-advisory
https://github.com/3em0/cve_repo/tree/main/2026/l…	exploit
https://github.com/ggml-org/llama.cpp/pull/30902	issue-trackingpatch
https://github.com/3em0/cve_repo/tree/main/2026/l…	exploit
https://github.com/ggml-org/llama.cpp/commit/0a1e…	patch
https://github.com/ggml-org/llama.cpp/releases/ta…	patch
https://github.com/ggml-org/llama.cpp/	product

Impacted products

1 product

Vendor	Product	Version	CPE status
ggml-org	llama.cpp	Affected: 0.4.0 Affected: 0.17.1 Affected: 55abc39 Affected: 55d4206c8 Affected: b5693 Affected: b7445 Affected: b7824 Affected: b8492 Affected: b8585 Affected: b9058 Affected: b9060 Unaffected: b11796 cpe:2.3:a:ggml-org:llama.cpp::::::::

Credits

Dem00000 (VulDB User) VulDB CNA Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-116096",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-26T15:59:49.571700Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-10-26T16:38:49.498Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "cpes": [
            "cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Pocket-TTS"
          ],
          "product": "llama.cpp",
          "vendor": "ggml-org",
          "versions": [
            {
              "status": "affected",
              "version": "0.4.0"
            },
            {
              "status": "affected",
              "version": "0.17.1"
            },
            {
              "status": "affected",
              "version": "55abc39"
            },
            {
              "status": "affected",
              "version": "55d4206c8"
            },
            {
              "status": "affected",
              "version": "b5693"
            },
            {
              "status": "affected",
              "version": "b7445"
            },
            {
              "status": "affected",
              "version": "b7824"
            },
            {
              "status": "affected",
              "version": "b8492"
            },
            {
              "status": "affected",
              "version": "b8585"
            },
            {
              "status": "affected",
              "version": "b9058"
            },
            {
              "status": "affected",
              "version": "b9060"
            },
            {
              "status": "unaffected",
              "version": "b11796"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "value": "Dem00000 (VulDB User)"
        },
        {
          "lang": "en",
          "type": "coordinator",
          "value": "VulDB CNA Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out\u2011of\u2011bounds write (gen\u2011audio / pocket\u2011tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release\u2011active GGML_ASSERT and aborts. But the submitter\u0027s recommended by\u2011construction fix (PR #29360 \"prevent OOB accesses from malformed mmproj files\") is still open. So the root cause is detected\u2011and\u2011aborted, not prevented\u2011by\u2011design."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 4.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
            "version": "4.0"
          }
        },
        {
          "cvssV3_1": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.1"
          }
        },
        {
          "cvssV3_0": {
            "baseScore": 5.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
            "version": "3.0"
          }
        },
        {
          "cvssV2_0": {
            "baseScore": 4.3,
            "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
            "version": "2.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "Out-of-bounds Write",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Memory Corruption",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-25T23:00:24.282Z",
        "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "shortName": "VulDB"
      },
      "references": [
        {
          "name": "VDB-426164 | ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write",
          "tags": [
            "vdb-entry",
            "technical-description"
          ],
          "url": "https://vuldb.com/vuln/426164"
        },
        {
          "name": "VDB-426164 | CTI Indicators (IOB, IOC, IOA)",
          "tags": [
            "signature",
            "permissions-required"
          ],
          "url": "https://vuldb.com/vuln/426164/cti"
        },
        {
          "name": "CVE-2026-116096 | CVE Analysis and Report",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/cve/CVE-2026-116096"
        },
        {
          "name": "Submit #1000891 | ggml-org xxxxxxxxxx\u00a0llama.cpp up to main commit 8212c7802455255460ab8e18fc34754560031b34 (latest release b11160, 2026-09-24) Out-of-Bounds Write (CWE-787)",
          "tags": [
            "third-party-advisory"
          ],
          "url": "https://vuldb.com/submit/1000891"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce"
        },
        {
          "tags": [
            "issue-tracking",
            "patch"
          ],
          "url": "https://github.com/ggml-org/llama.cpp/pull/30902"
        },
        {
          "tags": [
            "exploit"
          ],
          "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569"
        },
        {
          "tags": [
            "patch"
          ],
          "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11796"
        },
        {
          "tags": [
            "product"
          ],
          "url": "https://github.com/ggml-org/llama.cpp/"
        }
      ],
      "tags": [
        "x_open-source"
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-10-25T00:00:00.000Z",
          "value": "Advisory disclosed"
        },
        {
          "lang": "en",
          "time": "2026-10-25T02:00:00.000Z",
          "value": "VulDB entry created"
        },
        {
          "lang": "en",
          "time": "2026-10-25T08:00:36.000Z",
          "value": "VulDB entry last update"
        }
      ],
      "title": "ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write",
      "x_generator": [
        "VulDB PVTS v202610"
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
    "assignerShortName": "VulDB",
    "cveId": "CVE-2026-116096",
    "datePublished": "2026-10-25T23:00:24.282Z",
    "dateReserved": "2026-10-25T06:55:29.373Z",
    "dateUpdated": "2026-10-26T16:38:49.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-116096",
      "date": "2026-10-26",
      "epss": "0.00124",
      "percentile": "0.02108"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "cpes": [
                  "cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"
                ],
                "modules": [
                  "Pocket-TTS"
                ],
                "product": "llama.cpp",
                "vendor": "ggml-org",
                "versions": [
                  {
                    "status": "affected",
                    "version": "0.4.0"
                  },
                  {
                    "status": "affected",
                    "version": "0.17.1"
                  },
                  {
                    "status": "affected",
                    "version": "55abc39"
                  },
                  {
                    "status": "affected",
                    "version": "55d4206c8"
                  },
                  {
                    "status": "affected",
                    "version": "b5693"
                  },
                  {
                    "status": "affected",
                    "version": "b7445"
                  },
                  {
                    "status": "affected",
                    "version": "b7824"
                  },
                  {
                    "status": "affected",
                    "version": "b8492"
                  },
                  {
                    "status": "affected",
                    "version": "b8585"
                  },
                  {
                    "status": "affected",
                    "version": "b9058"
                  },
                  {
                    "status": "affected",
                    "version": "b9060"
                  },
                  {
                    "status": "unaffected",
                    "version": "b11796"
                  }
                ]
              }
            ],
            "source": "cna@vuldb.com"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out\u2011of\u2011bounds write (gen\u2011audio / pocket\u2011tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release\u2011active GGML_ASSERT and aborts. But the submitter\u0027s recommended by\u2011construction fix (PR #29360 \"prevent OOB accesses from malformed mmproj files\") is still open. So the root cause is detected\u2011and\u2011aborted, not prevented\u2011by\u2011design."
          }
        ],
        "id": "CVE-2026-116096",
        "lastModified": "2026-10-26T17:17:20.017",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "LOW",
                "accessVector": "LOCAL",
                "authentication": "SINGLE",
                "availabilityImpact": "PARTIAL",
                "baseScore": 4.3,
                "confidentialityImpact": "PARTIAL",
                "integrityImpact": "PARTIAL",
                "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              },
              "exploitabilityScore": 3.1,
              "impactScore": 6.4,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "cna@vuldb.com",
              "type": "Secondary",
              "userInteractionRequired": false
            }
          ],
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "LOW",
                "integrityImpact": "LOW",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
                "version": "3.1"
              },
              "exploitabilityScore": 1.8,
              "impactScore": 3.4,
              "source": "cna@vuldb.com",
              "type": "Secondary"
            }
          ],
          "cvssMetricV40": [
            {
              "cvssData": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "NONE",
                "attackVector": "LOCAL",
                "availabilityRequirement": "NOT_DEFINED",
                "baseScore": 1.9,
                "baseSeverity": "LOW",
                "confidentialityRequirement": "NOT_DEFINED",
                "exploitMaturity": "PROOF_OF_CONCEPT",
                "integrityRequirement": "NOT_DEFINED",
                "modifiedAttackComplexity": "NOT_DEFINED",
                "modifiedAttackRequirements": "NOT_DEFINED",
                "modifiedAttackVector": "NOT_DEFINED",
                "modifiedPrivilegesRequired": "NOT_DEFINED",
                "modifiedSubAvailabilityImpact": "NOT_DEFINED",
                "modifiedSubConfidentialityImpact": "NOT_DEFINED",
                "modifiedSubIntegrityImpact": "NOT_DEFINED",
                "modifiedUserInteraction": "NOT_DEFINED",
                "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
                "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
                "modifiedVulnIntegrityImpact": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
                "version": "4.0",
                "vulnAvailabilityImpact": "LOW",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "LOW",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "source": "cna@vuldb.com",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2026-116096",
                "options": [
                  {
                    "exploitation": "poc"
                  },
                  {
                    "automatable": "no"
                  },
                  {
                    "technicalImpact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-10-26T15:59:49.571700Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2026-10-25T23:17:41.897",
        "references": [
          {
            "source": "cna@vuldb.com",
            "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://github.com/ggml-org/llama.cpp/"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://github.com/ggml-org/llama.cpp/pull/30902"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11796"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/cve/CVE-2026-116096"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/submit/1000891"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/vuln/426164"
          },
          {
            "source": "cna@vuldb.com",
            "url": "https://vuldb.com/vuln/426164/cti"
          }
        ],
        "sourceIdentifier": "cna@vuldb.com",
        "vulnStatus": "Deferred",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              },
              {
                "lang": "en",
                "value": "CWE-787"
              }
            ],
            "source": "cna@vuldb.com",
            "type": "Secondary"
          }
        ]
      }
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-116096",
                    "options": [
                      {
                        "Exploitation": "poc"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-10-26T15:59:49.571700Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-10-26T15:59:52.459Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "cpes": [
                "cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"
              ],
              "modules": [
                "Pocket-TTS"
              ],
              "product": "llama.cpp",
              "vendor": "ggml-org",
              "versions": [
                {
                  "status": "affected",
                  "version": "0.4.0"
                },
                {
                  "status": "affected",
                  "version": "0.17.1"
                },
                {
                  "status": "affected",
                  "version": "55abc39"
                },
                {
                  "status": "affected",
                  "version": "55d4206c8"
                },
                {
                  "status": "affected",
                  "version": "b5693"
                },
                {
                  "status": "affected",
                  "version": "b7445"
                },
                {
                  "status": "affected",
                  "version": "b7824"
                },
                {
                  "status": "affected",
                  "version": "b8492"
                },
                {
                  "status": "affected",
                  "version": "b8585"
                },
                {
                  "status": "affected",
                  "version": "b9058"
                },
                {
                  "status": "affected",
                  "version": "b9060"
                },
                {
                  "status": "unaffected",
                  "version": "b11796"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "reporter",
              "value": "Dem00000 (VulDB User)"
            },
            {
              "lang": "en",
              "type": "coordinator",
              "value": "VulDB CNA Team"
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out\u2011of\u2011bounds write (gen\u2011audio / pocket\u2011tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release\u2011active GGML_ASSERT and aborts. But the submitter\u0027s recommended by\u2011construction fix (PR #29360 \"prevent OOB accesses from malformed mmproj files\") is still open. So the root cause is detected\u2011and\u2011aborted, not prevented\u2011by\u2011design."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "baseScore": 4.8,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
                "version": "4.0"
              }
            },
            {
              "cvssV3_1": {
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
                "version": "3.1"
              }
            },
            {
              "cvssV3_0": {
                "baseScore": 5.3,
                "baseSeverity": "MEDIUM",
                "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C",
                "version": "3.0"
              }
            },
            {
              "cvssV2_0": {
                "baseScore": 4.3,
                "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C",
                "version": "2.0"
              }
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-787",
                  "description": "Out-of-bounds Write",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            },
            {
              "descriptions": [
                {
                  "cweId": "CWE-119",
                  "description": "Memory Corruption",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-10-25T23:00:24.282Z",
            "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
            "shortName": "VulDB"
          },
          "references": [
            {
              "name": "VDB-426164 | ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write",
              "tags": [
                "vdb-entry",
                "technical-description"
              ],
              "url": "https://vuldb.com/vuln/426164"
            },
            {
              "name": "VDB-426164 | CTI Indicators (IOB, IOC, IOA)",
              "tags": [
                "signature",
                "permissions-required"
              ],
              "url": "https://vuldb.com/vuln/426164/cti"
            },
            {
              "name": "CVE-2026-116096 | CVE Analysis and Report",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/cve/CVE-2026-116096"
            },
            {
              "name": "Submit #1000891 | ggml-org xxxxxxxxxx\u00a0llama.cpp up to main commit 8212c7802455255460ab8e18fc34754560031b34 (latest release b11160, 2026-09-24) Out-of-Bounds Write (CWE-787)",
              "tags": [
                "third-party-advisory"
              ],
              "url": "https://vuldb.com/submit/1000891"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce"
            },
            {
              "tags": [
                "issue-tracking",
                "patch"
              ],
              "url": "https://github.com/ggml-org/llama.cpp/pull/30902"
            },
            {
              "tags": [
                "exploit"
              ],
              "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569"
            },
            {
              "tags": [
                "patch"
              ],
              "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11796"
            },
            {
              "tags": [
                "product"
              ],
              "url": "https://github.com/ggml-org/llama.cpp/"
            }
          ],
          "tags": [
            "x_open-source"
          ],
          "timeline": [
            {
              "lang": "en",
              "time": "2026-10-25T00:00:00.000Z",
              "value": "Advisory disclosed"
            },
            {
              "lang": "en",
              "time": "2026-10-25T02:00:00.000Z",
              "value": "VulDB entry created"
            },
            {
              "lang": "en",
              "time": "2026-10-25T08:00:36.000Z",
              "value": "VulDB entry last update"
            }
          ],
          "title": "ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write",
          "x_generator": [
            "VulDB PVTS v202610"
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
        "assignerShortName": "VulDB",
        "cveId": "CVE-2026-116096",
        "datePublished": "2026-10-25T23:00:24.282Z",
        "dateReserved": "2026-10-25T06:55:29.373Z",
        "dateUpdated": "2026-10-26T16:38:49.498Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-116096

Vulnerability from fkie_nvd - Published: 2026-10-25 23:17 - Updated: 2026-10-26 17:17

Severity

5.3 (Medium) - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Summary

References

	URL	Tags
	cna@vuldb.com	https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce
	cna@vuldb.com	https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc
	cna@vuldb.com	https://github.com/ggml-org/llama.cpp/
	cna@vuldb.com	https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569
	cna@vuldb.com	https://github.com/ggml-org/llama.cpp/pull/30902
	cna@vuldb.com	https://github.com/ggml-org/llama.cpp/releases/tag/b11796
	cna@vuldb.com	https://vuldb.com/cve/CVE-2026-116096
	cna@vuldb.com	https://vuldb.com/submit/1000891
	cna@vuldb.com	https://vuldb.com/vuln/426164
	cna@vuldb.com	https://vuldb.com/vuln/426164/cti

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"
          ],
          "modules": [
            "Pocket-TTS"
          ],
          "product": "llama.cpp",
          "vendor": "ggml-org",
          "versions": [
            {
              "status": "affected",
              "version": "0.4.0"
            },
            {
              "status": "affected",
              "version": "0.17.1"
            },
            {
              "status": "affected",
              "version": "55abc39"
            },
            {
              "status": "affected",
              "version": "55d4206c8"
            },
            {
              "status": "affected",
              "version": "b5693"
            },
            {
              "status": "affected",
              "version": "b7445"
            },
            {
              "status": "affected",
              "version": "b7824"
            },
            {
              "status": "affected",
              "version": "b8492"
            },
            {
              "status": "affected",
              "version": "b8585"
            },
            {
              "status": "affected",
              "version": "b9058"
            },
            {
              "status": "affected",
              "version": "b9060"
            },
            {
              "status": "unaffected",
              "version": "b11796"
            }
          ]
        }
      ],
      "source": "cna@vuldb.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out\u2011of\u2011bounds write (gen\u2011audio / pocket\u2011tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release\u2011active GGML_ASSERT and aborts. But the submitter\u0027s recommended by\u2011construction fix (PR #29360 \"prevent OOB accesses from malformed mmproj files\") is still open. So the root cause is detected\u2011and\u2011aborted, not prevented\u2011by\u2011design."
    }
  ],
  "id": "CVE-2026-116096",
  "lastModified": "2026-10-26T17:17:20.017",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:L/AC:L/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.1,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "cna@vuldb.com",
        "type": "Secondary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "LOW",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "LOW",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.4,
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "LOCAL",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 1.9,
          "baseSeverity": "LOW",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "PROOF_OF_CONCEPT",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "LOW",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "LOW",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "LOW",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "cna@vuldb.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-116096",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-10-26T15:59:49.571700Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-10-25T23:17:41.897",
  "references": [
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/ggml-org/llama.cpp/"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/ggml-org/llama.cpp/pull/30902"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11796"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/cve/CVE-2026-116096"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/submit/1000891"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/vuln/426164"
    },
    {
      "source": "cna@vuldb.com",
      "url": "https://vuldb.com/vuln/426164/cti"
    }
  ],
  "sourceIdentifier": "cna@vuldb.com",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        },
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "cna@vuldb.com",
      "type": "Secondary"
    }
  ]
}

GHSA-W879-PCH3-42X5

Vulnerability from github – Published: 2026-10-26 00:32 – Updated: 2026-10-26 00:32

Details

Severity

5.3 (Medium)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

1.9 (Low)


                  
                    CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-116096"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-10-25T23:17:41Z",
    "severity": "LOW"
  },
  "details": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out\u2011of\u2011bounds write (gen\u2011audio / pocket\u2011tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release\u2011active GGML_ASSERT and aborts. But the submitter\u0027s recommended by\u2011construction fix (PR #29360 \"prevent OOB accesses from malformed mmproj files\") is still open. So the root cause is detected\u2011and\u2011aborted, not prevented\u2011by\u2011design.",
  "id": "GHSA-w879-pch3-42x5",
  "modified": "2026-10-26T00:32:48Z",
  "published": "2026-10-26T00:32:48Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-116096"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ggml-org/llama.cpp/pull/30902"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569"
    },
    {
      "type": "WEB",
      "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce"
    },
    {
      "type": "WEB",
      "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ggml-org/llama.cpp"
    },
    {
      "type": "WEB",
      "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11796"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/cve/CVE-2026-116096"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/submit/1000891"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/vuln/426164"
    },
    {
      "type": "WEB",
      "url": "https://vuldb.com/vuln/426164/cti"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

UBUNTU-CVE-2026-116096 (CVE-2026-116096)

Vulnerability from osv_ubuntu – Published: 2026-10-26 00:00 – Updated: 2026-10-26 00:00 – Source website

Details

Severity

5.3 (Medium)


                    
                      CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

1.9 (Low)


                    
                      CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

N/A (UNKNOWN)


                    
                      medium

References

URL

Type

	https://ubuntu.com/security/CVE-2026-116096	REPORT
	https://www.cve.org/CVERecord?id=CVE-2026-116096	REPORT
	https://github.com/3em0/cve_repo/tree/main/2026/l…	REPORT
	https://github.com/3em0/cve_repo/tree/main/2026/l…	REPORT
	https://github.com/ggml-org/llama.cpp/	REPORT
	https://github.com/ggml-org/llama.cpp/commit/0a1e…	REPORT
	https://github.com/ggml-org/llama.cpp/pull/30902	REPORT
	https://github.com/ggml-org/llama.cpp/releases/ta…	REPORT
	https://vuldb.com/cve/CVE-2026-116096	REPORT
	https://vuldb.com/submit/1000891	REPORT
	https://vuldb.com/vuln/426164	REPORT
	https://vuldb.com/vuln/426164/cti	REPORT

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libllama0",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "llama.cpp",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "llama.cpp-examples",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "llama.cpp-services",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "llama.cpp-tests",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "llama.cpp-tools",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "llama.cpp-tools-extra",
            "binary_version": "10438+dfsg-1ubuntu1"
          },
          {
            "binary_name": "python3-gguf",
            "binary_version": "10438+dfsg-1ubuntu1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.10",
        "name": "llama.cpp",
        "purl": "pkg:deb/ubuntu/llama.cpp@10438+dfsg-1ubuntu1?arch=source\u0026distro=stonking"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "8681+dfsg-1",
        "9721+dfsg-1ubuntu1",
        "10438+dfsg-1",
        "10438+dfsg-1ubuntu1"
      ]
    },
    {
      "ecosystem_specific": {
        "binaries": [
          {
            "binary_name": "libllama0",
            "binary_version": "8681+dfsg-1"
          },
          {
            "binary_name": "llama.cpp",
            "binary_version": "8681+dfsg-1"
          },
          {
            "binary_name": "llama.cpp-examples",
            "binary_version": "8681+dfsg-1"
          },
          {
            "binary_name": "llama.cpp-tests",
            "binary_version": "8681+dfsg-1"
          },
          {
            "binary_name": "llama.cpp-tools",
            "binary_version": "8681+dfsg-1"
          },
          {
            "binary_name": "llama.cpp-tools-extra",
            "binary_version": "8681+dfsg-1"
          },
          {
            "binary_name": "python3-gguf",
            "binary_version": "8681+dfsg-1"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:26.04:LTS",
        "name": "llama.cpp",
        "purl": "pkg:deb/ubuntu/llama.cpp@8681+dfsg-1?arch=source\u0026distro=resolute"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "5882+dfsg-2",
        "8064+dfsg-1ubuntu1",
        "8681+dfsg-1"
      ]
    }
  ],
  "aliases": [],
  "details": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out\u2011of\u2011bounds write (gen\u2011audio / pocket\u2011tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release\u2011active GGML_ASSERT and aborts. But the submitter\u0027s recommended by\u2011construction fix (PR #29360 \"prevent OOB accesses from malformed mmproj files\") is still open. So the root cause is detected\u2011and\u2011aborted, not prevented\u2011by\u2011design.",
  "id": "UBUNTU-CVE-2026-116096",
  "modified": "2026-10-26T00:00:00Z",
  "published": "2026-10-26T00:00:00Z",
  "references": [
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2026-116096"
    },
    {
      "type": "REPORT",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-116096"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/ggml-org/llama.cpp/"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/ggml-org/llama.cpp/pull/30902"
    },
    {
      "type": "REPORT",
      "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11796"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/cve/CVE-2026-116096"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/submit/1000891"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/vuln/426164"
    },
    {
      "type": "REPORT",
      "url": "https://vuldb.com/vuln/426164/cti"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P",
      "type": "CVSS_V4"
    },
    {
      "score": "medium",
      "type": "Ubuntu"
    }
  ],
  "upstream": [
    "CVE-2026-116096"
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2026-116096 (GCVE-0-2026-116096)

FKIE_CVE-2026-116096

GHSA-W879-PCH3-42X5

UBUNTU-CVE-2026-116096 (CVE-2026-116096)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour