CERT24CVE-2026-116816: Heap out-of-bounds write in the llama.cpp plamo2 tokenizerLoading data…
CERT24Threat Observatory
Period

CVE-2026-116816: Heap out-of-bounds write in the llama.cpp plamo2 tokenizer

llama.cpp versions b5899 through before b10261 contain a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build. A crafted GGUF model can corrupt heap memory during model loading, causing crashes or potential code execution.

← Back to intelligence

CVE-2026-116816: Heap out-of-bounds write in the llama.cpp plamo2 tokenizer

llama.cpp versions b5899 through before b10261 contain a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build. A crafted GGUF model can corrupt heap memory during model loading, causing crashes or potential code execution.