CVE-2025-49847

llama.cpp is an inference of several LLM models in C/C++. Prior to version b5662, an attacker‐supplied GGUF model vocabulary can trigger a buffer overflow in llama.cpp’s vocabulary‐loading code. Specifically, the helper _try_copy in llama.cpp/src/vocab.cpp: llama_vocab::impl::token_to_piece() casts a very large size_t token length into an int32_t, causing the length check (if (length < (int32_t)size)) to be bypassed. As a result, memcpy is still called with that oversized size, letting a malicious model overwrite memory beyond the intended buffer. This can lead to arbitrary memory corruption and potential code execution. This issue has been patched in version b5662.

• CWE-119
• CWE-195

• https://github.com/ggml-org/llama.cpp/commit/3cfbbdb44e08fd19429fed6cc85b982a91f0efd5Patch
• https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-8wwf-w4qm-gpqrMitigation, Vendor Advisory

Published

Jun 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-49841GPT-SoVITS-WebUI is a voice conversion and text-to-speech we…9.8
• CVE-2025-49842conda-forge-webservices is the web app deployed to run conda…1
• CVE-2025-49843conda-smithy is a tool for combining a conda recipe with con…2.7
• CVE-2025-49844Redis is an open source, in-memory database that persists on…9.9
• CVE-2025-49845Discourse is an open-source discussion platform. The visibil…7.5
• CVE-2025-49846wire-ios is an iOS client for the Wire secure messaging appl…4.1
• CVE-2025-49848An out-of-bounds write vulnerability exists within the parsi…8.4
• CVE-2025-49849An Out-of-bounds Read vulnerability exists within the parsin…8.4
• CVE-2025-4985A stored Cross-site Scripting (XSS) vulnerability affecting …8.7
• CVE-2025-49850A Heap-based Buffer Overflow vulnerability exists within the…8.4
• CVE-2025-49851ControlID iDSecure On-premises versions 4.7.48.0 and prior a…9.8
• CVE-2025-49852ControlID iDSecure On-premises versions 4.7.48.0 and prior a…8.7