llama.cpp CVE-2026-116816: A Crafted GGUF File Corrupts the Heap on Load, Fixed Since b10261
A crafted GGUF file can write past a heap buffer in llama.cpp on model load. The fix shipped in b10261 twelve weeks before the CVE; check your builds.
· 4 min