CVE-2025-52566

CVE-2025-52566 is a high-severity vulnerability affecting llama.cpp prior to version b5721, stemming from a signed vs. unsigned integer overflow in its tokenizer. This flaw allows for a heap overflow in the llama.cpp inference engine when processing specially crafted text input. The vulnerability has a CVSS score of 8.8 (High), indicating that an unauthenticated attacker can exploit it with low complexity, potentially leading to high impact on confidentiality, integrity, and availability. While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability has been patched in version b5721.