CVE-2026-116467

EUVD-2026-110065
A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The project was informed of the problem early through a pull request but has not reacted yet.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 50.37%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).
VendorProductVersionSource
ggmlllama.cpp
0.1
CNA
ggmlllama.cpp
0.2
CNA
ggmlllama.cpp
0.3
CNA
ggmlllama.cpp
0.4
CNA
ggmlllama.cpp
0.5
CNA
ggmlllama.cpp
0.6
CNA
ggmlllama.cpp
0.7.0
CNA