CVE-2024-41130: Ggml Llama.cpp

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.

Affected products

• Ggml Llama.cpp: before b3427 (fixed in b3427)

Published 2024-07-22. Last modified 2026-06-17.