Confirmed
llama.cpp CVE-2026-116096 out-of-bounds write in Pocket-TTS component
The flaw is in the list_pockettts_state_slots function and is triggered by a malicious mmproj argument, requiring local access. Upgrading to build b11796 addresses it, and the latest release b11871 now aborts on the malicious input instead of writing out of bounds, though the root-cause fix PR #293…
Every outlet that ran it 1 article
r/LocalLLaMACommunityLead