CVE-2026-116096

Received Received - Intake

Heap Out-of-Bounds Write in llama.cpp Pocket-TTS

Publication date: 2026-10-25

Last updated on: 2026-10-25

Assigner: VulDB

Description

A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out‑of‑bounds write (gen‑audio / pocket‑tts state_out path) is no longer a silent exploitable heap write on current master and the latest release b11871 - a malicious mmproj that previously triggered it now trips a release‑active GGML_ASSERT and aborts. But the submitter's recommended by‑construction fix (PR #29360 "prevent OOB accesses from malformed mmproj files") is still open. So the root cause is detected‑and‑aborted, not prevented‑by‑design.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-25

Last Modified

2026-10-25

Generated

2026-10-26

AI Q&A

2026-10-26

EPSS Evaluated

N/A

NVD

CVE-2026-116096

EUVD

EUVD-2026-109577

Affected Vendors & Products

Vendor	Product	Version / Range
ggml-org	llama.cpp	0.4.0
ggml-org	llama.cpp	0.17.1
ggml-org	llama.cpp	55abc39
ggml-org	llama.cpp	55d4206c8
ggml-org	llama.cpp	b5693
ggml-org	llama.cpp	b7445
ggml-org	llama.cpp	b7824
ggml-org	llama.cpp	b8492
ggml-org	llama.cpp	b8585
ggml-org	llama.cpp	b9058
ggml-org	llama.cpp	b9060

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-787	The product writes data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a heap out-of-bounds write issue in ggml-org llama.cpp, specifically in the Pocket-TTS component. The function list_pockettts_state_slots in tools/mtmd/models/pockettts-gen.cpp is affected. Manipulating the mmproj argument causes a write beyond allocated memory bounds. The exploit requires local access and has been publicly disclosed.

Detection Guidance

This vulnerability requires local access and is specific to the ggml-org llama.cpp component, particularly the Pocket-TTS functionality. Detection involves checking the version of llama.cpp and inspecting the vulnerable file tools/mtmd/models/pockettts-gen.cpp. Upgrade to version b11796 or later to resolve the issue.

Impact Analysis

An attacker with local access could exploit this to execute arbitrary code or crash the application. The impact includes potential data corruption, denial of service, or unauthorized system access. Upgrading to version b11796 or later mitigates this risk.

Compliance Impact

This vulnerability involves a heap out-of-bounds write in the Pocket-TTS component of ggml-org llama.cpp, triggered by a malformed mmproj file. While it requires local access and has limited impact (CVSS v3.1 score of 5.3), it could potentially lead to unauthorized data access or modification if exploited. This may pose compliance risks under GDPR (data protection) or HIPAA (health data security) if sensitive data is processed by the affected component.

Mitigation Strategies

Upgrade the affected component (ggml-org llama.cpp) to version b11796 or later to resolve the issue. The patch name is 0a1ef309cdbb9f2024f58a38fb4c42352c5db569.

Hi! I’m here to help you understand CVE-2026-116096. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70