Llama.cpp Heap Out-of-Bounds Write Vulnerability in Pocket-TTS
October 25, 2026
A heap out-of-bounds write vulnerability in llama.cpp's Pocket-TTS component allows local attackers to exploit the list_pockettts_state_slots function via mmproj argument manipulation. Users must upgrade to version b11796 or later to mitigate the risk of public exploits.
HOW THIS AFFECTS YOU
●
builderYou must immediately upgrade llama.cpp to prevent local exploitation in your deployments.
●
policyThis highlights the importance of monitoring local-access vulnerabilities in popular open-source inference engines.