Out-of-bounds Read in Ggml-Org Llama.cpp
CVE-2024-58399
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.1 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H.
EPSS exploit prediction
EPSS: 0.001 (1.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 2nd percentile — 1.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
The 30-day trend appears once there are two daily scores.
Affected products
Weakness classification (CWE)
References
- github.com/ggml-org/llama.cpp/blob/b2730/llama.cpp (technical-description)
- github.com/ggml-org/llama.cpp/commit/0ead1f1072fdc70720f92e008a294dc74a826b1d (patch)
- github.com/ggml-org/llama.cpp/issues/6774 (issue-tracking)
- github.com/ggml-org/llama.cpp/pull/6885 (issue-tracking, patch)
- github.com/ggml-org/llama.cpp/releases/tag/b2731 (release-notes)
- www.vulncheck.com/advisories/llama-cpp-before-b2731-out-of-bounds-read-via-gguf… (third-party-advisory)
Frequently asked questions
- What is CVE-2024-58399?
- CVE-2024-58399 is a medium-severity vulnerability in Ggml-Org Llama.cpp, classified under Out-of-bounds Read. CVSS score: 6.1/10. Published 2026-10-27.
- How severe is CVE-2024-58399?
- Medium severity. CVSS v3 base score is 6.1 out of 10.