Live › vulnerability › CVE-2025-71439
Go to dashboardllama.cpp before b5649 has a heap out-of-bounds read in the vocabulary print routine, triggered by oversized special token IDs in a crafted GGUF model. An attacker who gets a team to load a malicious model crashes llama-cli or llama-server during model loading.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 01:34 UTC. All times on this page are UTC.
Teams that run llama.cpp builds older than b5649 and load GGUF model files, especially ones downloaded from third parties. Systems that only use models they built or verified themselves face much less exposure.
No product ranges from the sources yet.
llama-server --version or llama-cli --version and compare the build number against b5649b5649 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
This page as .md · .json · in your agent: get_signal("CVE-2025-71439")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.