Read the docs
TI-2026-31734 Aliases CVE-2026-43630GHSA-27j8-r4f8-8v3x

llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure

Priority LOW 35CWE-125Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-209.

Summary

llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seq_id value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and facilitating further exploitation.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00498 42nd percentileScored 2026-11-07
Fix Fixed llama.cpp (ggml-org): b8487

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
ggml-orgllama.cppb4882 to before b8487b8487Patch availableCNA
  • llama.cpp Vendorggml-org Affected b4882 to before b8487 Fixed in b8487 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*b5702 – b7653Vulnerableggml-org
  • cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:* Versions b5702 – b7653 Vulnerable ·ggml-org

Remediation

  • Fix · CNA llama.cpp (ggml-org) Fixed in b8487

Vendor assessments

Red Hat

Red Hat's page for this CVE →

Not affected: 1 product
  • Red Hat

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-43630
  2. 2026-10-03 Alias added: GHSA-27j8-r4f8-8v3x
  3. 2026-10-22 Title updated · CNA
  4. 2026-10-22 Fix available: ggml-org/llama.cpp@b8487 · CNA

References

Patch 2

Other 1

  • TI-2026-26459 llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend CVSS 3.1CRITICAL 9.8
  • TI-2024-28446 llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor CVSS 3.1CRITICAL 9.8
  • TI-2026-17570 llama.cpp has Out-of-bounds Write in llama-server CVSS 3.1CRITICAL 9.8
  • TI-2024-28447 llama.cpp allows write-what-where in rpc_server::set_tensor CVSS 3.1CRITICAL 10.0
  • TI-2024-15627 Integer overflow in ggml-org llama.cpp CVSS 3.1CRITICAL 9.8
  • TI-2024-14482 Heap-based buffer overflow in ggml-org llama.cpp CVSS 3.1CRITICAL 9.8
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences