llama.cpp: Llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the…
llama.cpp
More for llama.cpp RSS feed for llama.cpp
- Severity
- High, CVSS 7.8
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Record
- CVE-2026-43627
- Affects
- llama.cpp
- Known exploited
- Not listed in the CISA Known Exploited Vulnerabilities catalog
- Published
- Record first published by the source
- August 6, 2026
- Source last modified
- October 23, 2026
Description
llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundaries.
Description quoted from the NVD record.
Who is affected
Your organization is affected if it uses llama.cpp, made by ggml, a program that runs AI language models on your own computers or servers. This flaw affects builds b1283 through b9058. It sits in the part of the program that prepares batches of text for the model to work on. An attacker who can pass specially crafted settings to that part can make a size calculation go wrong, which corrupts the program's memory and could let the attacker run their own commands on the machine. This flaw is rated High.
What to do
- The person who installed or runs llama.cpp for your organization should check which build each computer or server is using. Builds b1283 through b9058 have this flaw.
- No fixed version is named for this flaw yet, so check the vendor advisory linked on this page for a fixed release, and install it on every affected machine as soon as it is available.
- If an IT provider or vendor runs llama.cpp for your organization, send them this advisory and ask when the update will be done.
Analysis written from the source record as of October 23, 2026 and reviewed before publishing.