CVE-2026-43630: medium-severity vulnerability in ggml-org llama.cpp
llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.3epss 0.5%
llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seq_id value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and facilitating further exploitation.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N
Affected products
ggml-org · llama.cppRelated CVEs — ggml-org llama.cpp
In the same product, most dangerous first.
CVE-2026-34159CRITICALllama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backendEPSS 1.6%CVE-2026-78148MEDIUMggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereferenceEPSS 0.7%CVE-2026-17501MEDIUMggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursionEPSS 0.7%CVE-2026-17500MEDIUMggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereferenceEPSS 0.7%CVE-2026-86317MEDIUMggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertionEPSS 0.7%CVE-2026-43629CRITICALllama.cpp b4882–b9058 Buffer Overflow in KV Cache State RestoreEPSS 0.7%
References
https://github.com/ggml-org/llama.cpphttps://github.com/ggml-org/llama.cpp/commit/f93c09e2673090b59802f2552848a1cac70598b0https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patcheshttps://www.vulncheck.com/advisories/llama-cpp-b5702-b7653-out-of-bounds-read-information-disclosure