Vulnerabilities in Runtimes & formats

Tensor libraries, model formats and loaders. 10 currently disclosed, newest first. Each links through to the merged record for that CVE.

• 9.3 MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass) CVE-2026-48705 MONAI 27 Oct 2026
• 6.9 llama.cpp b5854 before b11275 contains an integer overflow vulnerability in ggufinitfromreader that bypasses the CVE-2025-53630 size check… CVE-2026-116840 GGUF, llama.cpp 27 Oct 2026
• 6.9 llama.cpp b10398 before b11301 contains an integer overflow vulnerability in ggufinitfromreader that allows attackers to bypass tensor… CVE-2026-116829 GGUF, llama.cpp 27 Oct 2026
• 8.5 llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llmtokenizerplamo2::build that allows attackers to… CVE-2026-116816 GGUF, llama.cpp 27 Oct 2026
• 6.8 llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo() that allows attackers to crash… CVE-2025-71439 GGUF, llama.cpp 27 Oct 2026
• 6.9 llama.cpp before b2731 contains an out-of-bounds read vulnerability in llamamodelloader that allows attackers to read memory outside the… CVE-2024-58399 GGUF, llama.cpp 27 Oct 2026
• 6.2 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. CVE-2026-115922 ONNX 26 Oct 2026
• 6.2 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. CVE-2026-115921 ONNX 26 Oct 2026
• 6.2 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. CVE-2026-115920 ONNX 26 Oct 2026
• 6.2 Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. CVE-2026-115919 ONNX 26 Oct 2026

Open this in the live dashboard to filter further, or query it with search_cves over MCP.