CVE catalog
CVE-2025-52566
DEBIAN-CVE-2025-52566
- Severity
- High · CVSS 8.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.36% · Oct 27, 2026
llama.cpp is an inference of several LLM models in C/C++. Prior to version b5721, there is a signed vs. unsigned integer overflow in llama.cpp's tokenizer implementation (llama_vocab::tokenize) (src/llama-vocab.cpp:3036) resulting in unintended behavior in tokens copying size comparison. Allowing heap-overflowing llama.cpp inferencing engine with carefully manipulated text input during tokenization process. This issue has been patched in version b5721.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | llama.cpp | 14 | 5151+dfsg-1~exp2 | vulnerable |
| Debian | llama.cpp | 14 | 5151+dfsg-1~exp3 | vulnerable |
| Debian | llama.cpp | 14 | 5318+dfsg-1 | vulnerable |
| Debian | llama.cpp | 14 | 5318+dfsg-2 | vulnerable |
| Debian | llama.cpp | 14 | 5713+dfsg-1 | vulnerable |
| Debian | llama.cpp | 14 | 5760+dfsg-1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | llama.cpp | deb | 14 | 5760+dfsg-1 | Not reported | DEBIAN-CVE-2025-52566 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed: