← Back to CVE List
CVE-2026-116096NVD
Vulnerability Summary
A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out‑of‑bounds write (gen‑audio / pocket‑tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release‑active GGML_ASSERT and aborts. But the submitter's recommended by‑construction fix (PR #29360 "prevent OOB accesses from malformed mmproj files") is still open. So the root cause is detected‑and‑aborted, not prevented‑by‑design.
CVSS v4.0 Base Metrics — Score 4.8 (MEDIUM)
Attack VectorLocal
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredLow
User InteractionNone
Confidentiality (Vulnerable System)Low
Integrity (Vulnerable System)Low
Availability (Vulnerable System)Low
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
CVSS v3.1 Base Metrics — Score 5.3 (MEDIUM)
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityLow
IntegrityLow
AvailabilityLow
Affected & Patched Versions
- ggml-org llama.cpp >= 0.4.0
- ggml-org llama.cpp >= 0.17.1
- ggml-org llama.cpp >= 55abc39
- ggml-org llama.cpp >= 55d4206c8
- ggml-org llama.cpp >= b5693
- ggml-org llama.cpp >= b7445
- ggml-org llama.cpp >= b7824
- ggml-org llama.cpp >= b8492
- ggml-org llama.cpp >= b8585
- ggml-org llama.cpp >= b9058
- ggml-org llama.cpp >= b9060
Not provided by cveorg for this CVE.
External References
- https://vuldb.com/vuln/426164
- https://vuldb.com/vuln/426164/cti
- https://vuldb.com/cve/CVE-2026-116096
- https://vuldb.com/submit/1000891
- https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce
- https://github.com/ggml-org/llama.cpp/pull/30902
- https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc
- https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569
- https://github.com/ggml-org/llama.cpp/releases/tag/b11796
- https://github.com/ggml-org/llama.cpp/