CVE-2026-119052

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-119052", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-10-29T11:51:51.673Z", "datePublished": "2026-10-29T13:08:52.886Z", "dateUpdated": "2026-10-29T17:19:54.661Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-29T13:08:52.886Z"}, "datePublic": "2026-10-27T00:00:00.000Z", "title": "llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length", "descriptions": [{"lang": "en", "value": "llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Uncaught Exception", "cweId": "CWE-248", "type": "CWE"}]}], "affected": [{"vendor": "ggml-org", "product": "llama.cpp", "defaultStatus": "unaffected", "packageURL": "pkg:github/ggml-org/llama.cpp", "versions": [{"version": "b2877", "lessThan": "b11935", "status": "affected", "versionType": "custom"}], "repo": "https://github.com/ggml-org/llama.cpp"}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*", "versionStartIncluding": "b2877", "versionEndExcluding": "b11935"}]}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH"}}, {"format": "CVSS", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH"}}], "references": [{"url": "https://github.com/ggml-org/llama.cpp/pull/31204", "tags": ["patch", "issue-tracking"]}, {"url": "https://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4", "tags": ["patch"], "name": "Patch Commit"}, {"url": "https://github.com/ggml-org/llama.cpp", "tags": ["product"]}, {"url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11935", "tags": ["release-notes"], "name": "llama.cpp b11935 Release Notes"}, {"url": "https://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356", "tags": ["technical-description"]}, {"name": "VulnCheck Advisory: llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length"}], "credits": [{"lang": "en", "value": "Sohaib Harraoui (Ostorlab)", "type": "finder"}, {"lang": "en", "value": "Sohaib Harraoui (Ostorlab)", "type": "remediation developer"}], "x_generator": {"engine": "vulncheck-endgame"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-29T15:43:46.702942Z", "id": "CVE-2026-119052", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T17:19:54.661Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-119052", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-29T15:43:46.702942Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-29T15:43:47.801Z"}}], "cna": {"title": "llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length", "credits": [{"lang": "en", "type": "finder", "value": "Sohaib Harraoui (Ostorlab)"}, {"lang": "en", "type": "remediation developer", "value": "Sohaib Harraoui (Ostorlab)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"version": "4.0", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}], "affected": [{"repo": "https://github.com/ggml-org/llama.cpp", "vendor": "ggml-org", "product": "llama.cpp", "versions": [{"status": "affected", "version": "b2877", "lessThan": "b11935", "versionType": "custom"}], "packageURL": "pkg:github/ggml-org/llama.cpp", "defaultStatus": "unaffected"}], "datePublic": "2026-10-27T00:00:00.000Z", "references": [{"url": "https://github.com/ggml-org/llama.cpp/pull/31204", "tags": ["patch", "issue-tracking"]}, {"url": "https://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4", "name": "Patch Commit", "tags": ["patch"]}, {"url": "https://github.com/ggml-org/llama.cpp", "tags": ["product"]}, {"url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11935", "name": "llama.cpp b11935 Release Notes", "tags": ["release-notes"]}, {"url": "https://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356", "tags": ["technical-description"]}, {"url": "https://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length", "name": "VulnCheck Advisory: llama.cpp b2877 before b11935 ggml-rpc Server DoS via Oversized recv_msg Length", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck-endgame"}, "descriptions": [{"lang": "en", "value": "llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-248", "description": "Uncaught Exception"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "b11935", "versionStartIncluding": "b2877"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-10-29T13:08:52.886Z"}}}, "cveMetadata": {"cveId": "CVE-2026-119052", "state": "PUBLISHED", "dateUpdated": "2026-10-29T17:19:54.661Z", "dateReserved": "2026-10-29T11:51:51.673Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-10-29T13:08:52.886Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "packageURL": "pkg:github/ggml-org/llama.cpp", "product": "llama.cpp", "repo": "https://github.com/ggml-org/llama.cpp", "vendor": "ggml-org", "versions": [{"lessThan": "b11935", "status": "affected", "version": "b2877", "versionType": "custom"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients."}], "id": "CVE-2026-119052", "lastModified": "2026-10-29T18:17:29.833", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-119052", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-29T15:43:46.702942Z", "version": "2.0.3"}}]}, "published": "2026-10-29T14:17:52.310", "references": [{"source": "disclosure@vulncheck.com", "url": "https://github.com/ggml-org/llama.cpp"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/ggml-org/llama.cpp/pull/31204"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/ggml-org/llama.cpp/releases/tag/b11935"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-248"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{"bugzilla": {"description": "llama-cpp: llama.cpp: Denial of Service via oversized RPC messages", "id": "2563364", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563364"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-248", "details": ["llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients.", "A flaw was found in llama.cpp. An unauthenticated remote attacker can cause a Denial of Service (DoS) by sending a specially crafted request with an excessively large message length to the Remote Procedure Call (RPC) server. Handling this malformed input triggers an unhandled exception, crashing the server process and disrupting service for all connected clients."], "name": "CVE-2026-119052", "public_date": "2026-10-29T13:08:52Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-119052\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-119052\nhttps://github.com/ggml-org/llama.cpp\nhttps://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356\nhttps://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4\nhttps://github.com/ggml-org/llama.cpp/pull/31204\nhttps://github.com/ggml-org/llama.cpp/releases/tag/b11935\nhttps://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length"], "statement": "This vulnerability is rated as Important because an unauthenticated remote attacker can force an immediate process termination without prior credentials or user interaction, causing a complete loss of service for connected clients. Exposure is limited to environments where the optional ggml-rpc daemon is explicitly executed and reachable across untrusted networks. Standalone local inference workloads do not expose network listeners and are unaffected.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[b2877,b11935)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "llama.cpp", "source": "cna", "vendor": "ggml-org"}, "product": "llama.cpp", "vendor": "ggml"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[b2877,b11935)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "llama.cpp", "source": "cna", "vendor": "ggml-org"}, "product": "llama.cpp", "vendor": "ggml-org"}], "created": "2026-10-29T15:15:14.741666+00:00", "updated": "2026-10-29T15:30:16.126110+00:00", "vendors": ["ggml", "ggml$PRODUCT$llama.cpp", "ggml-org", "ggml-org$PRODUCT$llama.cpp"]}