Bug 2450678

Summary: CVE-2026-33298 python-llama-cpp-python: llama.cpp: Remote Code Execution vulnerability due to integer overflow in GGUF file processing [fedora-all]
Product: [Fedora] Fedora Reporter: Alexander B <abushkin>
Component: python-llama-cpp-pythonAssignee: Tomas Tomecek <ttomecek>
Status: ASSIGNED --- QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: rawhideCC: jmatufka, jpodivin, Tom.Rix, ttomecek
Target Milestone: ---Keywords: Security, SecurityTracking
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: {"flaws": ["c4ff1802-0edf-446a-b300-04e595fafa90"]}
Fixed In Version: Doc Type: ---
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 2450575    

Description Alexander B 2026-03-24 10:40:40 UTC 
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.
Comment 1 Jiri Podivin 2026-06-02 20:35:52 UTC 
The issue should be resolved by an upstream release[1]. The Fedora 45 should already carry this fix[2].

Besides the main package, the python-llama-cpp-python is bundled with the same library, and is affected.
The linked source has to be modified as well.[3]

[1] https://github.com/ggml-org/llama.cpp/releases/tag/b7824 
[2] https://src.fedoraproject.org/rpms/llama-cpp/
[3] https://src.fedoraproject.org/rpms/python-llama-cpp-python/blob/rawhide/f/sources
Comment 2 Tomas Tomecek 2026-07-02 11:11:26 UTC 
Rebasing the package to the latest upstream is now blocked on

```
  - nothing provides (python3.15dist(typer) < 0.26~~ with python3.15dist(typer) >= 0.20) needed by python3-huggingface-hub-1.18.0-1.fc45.noarch from build
```

https://src.fedoraproject.org/rpms/python-llama-cpp-python/pull-request/21#