PT-2025-26690 · Llama.Cpp · Llama.Cpp
Retr0Reg
·
Published
2025-06-24
·
Updated
2025-10-11
·
CVE-2025-52566
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
llama.cpp version prior to b5721
Description:
The issue is related to a signed vs. unsigned integer overflow in the
llama vocab::tokenize function of llama.cpp's tokenizer implementation, resulting in unintended behavior during token copying size comparison. This allows the llama.cpp inferencing engine to be overflowed with carefully manipulated text input during the tokenization process.Recommendations:
For versions prior to b5721, update to version b5721 to resolve the issue. As a temporary workaround, consider restricting the input to the
llama vocab::tokenize function to prevent exploitation until the update can be applied.Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Llama.Cpp