Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Microsoft Security Blog

Google Project Zero

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the gguf_init_from_file_impl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900062661bd22f3e792579.

CVE-2025-53630 is a high-severity heap-based buffer overflow vulnerability identified in the ggml-org's llama.cpp project, which is a C/C++ implementation for inference of several large language models (LLMs). The root cause of the vulnerability lies in an integer overflow within the function gguf_init_from_file_impl located in the source file ggml/src/gguf.cpp. This integer overflow can lead to heap out-of-bounds read and write operations, which may allow an attacker to corrupt memory, potentially leading to arbitrary code execution, application crashes, or data leakage. The vulnerability affects all versions of llama.cpp prior to the commit 26a48ad699d50b6268900062661bd22f3e792579, where the issue was fixed. The CVSS v4.0 base score is 8.9, indicating a high severity with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, and availability. The vulnerability does not require authentication or user interaction, making it exploitable remotely if the vulnerable llama.cpp implementation is exposed to untrusted inputs. While no known exploits are currently reported in the wild, the potential for exploitation is significant due to the nature of the vulnerability and the increasing adoption of LLM inference engines in various applications. The CWE identifiers associated are CWE-122 (Heap-based Buffer Overflow) and CWE-680 (Integer Overflow to Buffer Overflow), highlighting the technical cause and effect of the flaw. This vulnerability is critical for any deployment using llama.cpp for LLM inference, especially in environments where untrusted data is processed or where the inference engine is exposed to network inputs.

Detailed information about CVE-2025-53630: CWE-122: Heap-based Buffer Overflow in ggml-org llama.cpp affecting ggml-org llama.cpp. Get real-time updates, techni

CVE-2025-53630: CWE-122: Heap-based Buffer Overflow in ggml-org llama.cpp - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-53630: CWE-122: Heap-based Buffer Overflow in ggml-org llama.cpp

Threats Tagged 'cve-2025-53630'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2025-53630'

Lead Pen Test Professional