ZDI-26-954: llama.cpp MTMD Multimodal GGUF File Parsing Integer Overflow Remote Code Execution Vulnerability

Summary

ZDI-26-954 affects llama.cpp and lets remote attackers execute arbitrary code when a target opens a malicious file. The flaw is in parsing of audio multimodal projector GGUF files, where missing validation of user-supplied data causes an integer overflow before a buffer is allocated. The ZDI rates it CVSS 7.0 and assigns CVE-2026-126976.

Mitigation

llama.cpp has issued an update to correct this vulnerability. Details are at https://github.com/ggml-org/llama.cpp/commit/e2e7a9b2d04e0404131e551243d4bd399ccfe606

Topics

• Inference infrastructure

Related items

• MediumARTEX and beyond: AI-enabled penetration testing platformsSimilar attack · Cisco Talos Blog
• InfoHow AI is changing the nature of cyberattacksSimilar attack · CSO Online
• MediumInside the loop: Five AI attack frameworks that never ask permissionSimilar attack · Elastic Security Labs
• MediumARTEX: Attackers Adopted This AI Pentesting Tool in Three Months. Leaked Secrets Are Its Fastest Way In.Similar attack · StepSecurity Blog
• MediumFBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video CallsSimilar attack · The Hacker News