ZDI-26-975: llama.cpp GGUF File Parsing Integer Overflow Remote Code Execution Vulnerability

Summary

ZDI-26-975 describes an integer overflow in the GGUF file parser of llama.cpp that lacks proper validation of user-supplied data. A remote attacker can exploit it by getting a target to visit a malicious page or open a malicious file, and execute arbitrary code in the context of the current process. The ZDI rates it CVSS 7.8 and it is tracked as CVE-2026-126974.

Mitigation

llama.cpp has issued an update to correct this vulnerability. More details are available at https://github.com/ggml-org/llama.cpp/pull/31336.

Topics

• Inference infrastructure

Related items

• MediumARTEX and beyond: AI-enabled penetration testing platformsSimilar attack · Cisco Talos Blog
• InfoHow AI is changing the nature of cyberattacksSimilar attack · CSO Online
• MediumInside the loop: Five AI attack frameworks that never ask permissionSimilar attack · Elastic Security Labs
• MediumARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.Similar attack · StepSecurity Blog
• MediumFBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video CallsSimilar attack · The Hacker News