CVE catalog

CVE-2025-49847

ggml-devel-5699-1.1 on GA media

Severity: Unknown
Published: Jun 17, 2025, 8:15:32 PM UTC
Updated: Sep 1, 2026, 8:05:53 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.52% · Oct 25, 2026

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper _try_copy in llama.cpp/src/vocab.cpp: llama_vocab::impl::token_to_piece() casts a very large size_t token length into an int32_t, causing the length check (if (length < (int32_t)size)) to be bypassed. As a result, memcpy is still called with that oversized size, letting a malicious model overwrite memory beyond the intended buffer. This can lead to arbitrary memory corruption and potential code execution. This issue has been patched in version b5662.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	llama.cpp	14	`5151+dfsg-1~exp2`	vulnerable
Debian	llama.cpp	14	`5151+dfsg-1~exp3`	vulnerable
Debian	llama.cpp	14	`5318+dfsg-1`	vulnerable
Debian	llama.cpp	14	`5318+dfsg-2`	vulnerable
Debian	llama.cpp	14	`5713+dfsg-1`	fixed
Opensuse	llamacpp	tumbleweed	`5699-1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	llama.cpp	deb	14	`5713+dfsg-1`	Not reported	DEBIAN-CVE-2025-49847	Not reported
Opensuse	llamacpp	rpm	tumbleweed	`5699-1.1`	Not reported	OPENSUSE-SU-2025:15245-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[ggml-devel]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libggml0]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libggml-base0]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libggml-cpu]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libggml-opencl]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libggml-openvino]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libggml-vulkan]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libllama0]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libllama-common0]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[libmtmd0]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[llamacpp-devel]Unknown
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Unknown · Fixed: 5699-1.1
  Version impact unknown
  pypi · llamacpp · opensuse · tumbleweed
[llamacpp]Fixed
Source package: [llamacpp]
Details (1)
- 10154-1.3 · x86_64 · tumbleweed
  Fixed · Fixed: 5699-1.1
  pypi · llamacpp · opensuse · tumbleweed

Observed: Oct 24, 2026, 9:52:39 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]