CVE Feed

    Dashboard / CVE / CVE-2026-2069

    CVE-2026-2069

    A flaw has been found in ggml-org llama.cpp up to 55abc39. Impacted is the function llama_grammar_advance_stack of the file llama.cpp/src/llama-grammar.cpp of the component GBNF Grammar Handler. This manipulation causes stack-based buffer overflow. The attack needs to be launched locally. The exploit has been published and may be used. Patch name: 18993. To fix this issue, it is recommended to deploy a patch.

    Published:Feb 6, 2026
    Last Modified:Apr 17, 2026
    EPS:Feb 6, 2026
    EPSS Score:0.00019
    CVSS Score:3.3

    Affected Products

    Vendor
    Ggml
    Product
    Llama.cpp

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-52131 (CVSS 7.5) — llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.…
    CVE-2026-52130 (CVSS 7.5) — llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resul…
    CVE-2026-52132 (CVSS 7.5) — llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a d…
    CVE-2026-43632 (CVSS 9.2) — llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affect…
    CVE-2026-43631 (CVSS 9.2) — llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer o…
    CVE-2026-43630 (CVSS 6.3) — llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state…
    CVE-2026-43629 (CVSS 9.2) — llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restor…
    CVE-2026-43628 (CVSS 8.5) — llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the …
    CVE-2026-43627 (CVSS 8.5) — llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() funct…
    CVE-2026-70640 (CVSS 7.3) — llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Androi…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High