AI Briefingllama.cpp CVE-2026-116096: Pocket-TTS heap out-of-bounds write requires local access
·2026.10.26 09:53
Key point
The vulnerability in the Pocket-TTS component is mitigated by an assertion in release b11871, though the permanent fix remains an open pull request.
Details
- CVE-2026-116096 identifies a heap out-of-bounds write in the list_pockettts_state_slots function of tools/mtmd/models/pockettts-gen.cpp.
- The vulnerability is triggered by manipulating the mmproj argument and requires local access to exploit.
- Current master and release b11871 mitigate the issue by tripping a release-active GGML_ASSERT that aborts execution, preventing the silent heap write.
- The recommended by-construction fix in PR #29360 is still open, meaning the root cause is detected-and-aborted rather than prevented by design.
- Upgrading to version b11796 or later resolves the immediate exploitability, with patch 0a1ef309cdbb9f2024f58a38fb4c42352c5db569 available.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Nvidia OpenShell: Secure Runtime for Autonomous AI Agent Fleets
Opposable runs 2B GUI-Owl 1.5 model on Android for on-device app control