CVE-2025-53630
High
Description
llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900062661bd22f3e792579.
SeverityHigh
CVSS8.9
Exploit probability—
ProductGgml-org Llama.cpp
PublishedJul 10, 2025
First seenJul 10, 2025
Weakness typeCWE-122CWE-122CWE-680CWE-680
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ggml-org llama.cpp | < 26a48ad699d50b6268900062661bd22f3e792579 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.