llama.cpp releases July 8, 2026 · Infrastructure

b9917: fix: OOB reads in UGM tokenizer (precompiled_charsmap handling) (#18750)

fix: OOB reads in UGM tokenizer (precompiled_charsmap handling) Validate minimum size (4 bytes) before reading xcda_blob_size Use strnlen with bounds check instead of unsafe strlen Both issues allow heap-buffer-overflow from malicious T5/UGM GGUF files. Replace unsafe strnlen() with a bounds-checked loop that scans for