llama.cpp discloses CVE-2026-116096, fixed in b11796, root-cause PR still open

Original title: PSA: llama.cpp CVE-2026-116096

ggml-org llama.cpp has a vulnerability, CVE-2026-116096, in the Pocket-TTS component: the function list_pockettts_state_slots in tools/mtmd/models/pockettts-gen.cpp allows an out-of-bounds write via the mmproj argument; the attack requires local access and a public exploit is available. Upgrading to b11796 resolves it (patch 0a1ef309cdbb9f2024f58a38fb4c42352c5db569). The submitter adds that on current master and the latest release b11871, a malicious mmproj now trips a release-active GGML_ASSERT and aborts instead of a silent exploitable heap write, but PR #29360, which would prevent OOB accesses from malformed mmproj files by construction, is still open, meaning the root cause is detected-and-aborted rather than prevented by design.

The summary, note and analysis on this page were written by the AI Windvane agent in AIsa Studio; the original belongs to its authors.