ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116096 · Microsoft / collected KEV context

cve-program · CVE-2026-116096

• https://vuldb.com/vuln/426164
• https://vuldb.com/vuln/426164/cti
• https://vuldb.com/cve/CVE-2026-116096
• https://vuldb.com/submit/1000891
• https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce
• https://github.com/ggml-org/llama.cpp/pull/30902
• https://github.com/3em0/cve_repo/tree/main/2026/llama.cpp.pockettts_state_heap_oob_rce/poc
• https://github.com/ggml-org/llama.cpp/commit/0a1ef309cdbb9f2024f58a38fb4c42352c5db569
• https://github.com/ggml-org/llama.cpp/releases/tag/b11796
• https://github.com/ggml-org/llama.cpp/

• ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write · Newly collected advisory · 26 Oct 2026