{"kind": "product", "path": "vulns/debian-14/llama.cpp", "name": "llama.cpp", "product": "llama.cpp", "ecosystem": "Debian:14", "items": [{"id": "CVE-2026-116840", "noindex": false, "published": "2026-10-27T00:33:59.834Z", "modified": "2026-10-27T14:14:10.931Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00126, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116840", "title": "llama.cpp b5854 before b11275 Integer Overflow in gguf_init_from_reader", "description": "llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.", "references": ["https://github.com/ggml-org/llama.cpp/issues/26978", "https://github.com/ggml-org/llama.cpp/pull/26979", "https://github.com/ggml-org/llama.cpp/commit/a6ea155d3d38b3f6f43d0c0dc29c2d592413ef44"], "fixes": ["1:0.6.0+dfsg-1"], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-116829", "noindex": false, "published": "2026-10-27T00:33:59.223Z", "modified": "2026-10-27T00:33:59.223Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00126, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116829", "title": "llama.cpp b10398 before b11301 Integer Overflow in gguf_init_from_reader", "description": "llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.", "references": ["https://github.com/ggml-org/llama.cpp/issues/29383", "https://github.com/ggml-org/llama.cpp/pull/29384", "https://github.com/ggml-org/llama.cpp/commit/2149c00f4442dc59302e134a02e4c99d5f7ed9fc"], "fixes": ["1:0.6.0+dfsg-1"], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-116816", "noindex": false, "published": "2026-10-27T00:33:58.581Z", "modified": "2026-10-27T00:33:58.581Z", "cvss": 8.5, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00135, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116816", "title": "llama.cpp b5899 before b10261 Heap Out-of-Bounds Write via plamo2 Tokenizer", "description": "llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.", "references": ["https://github.com/ggml-org/llama.cpp/pull/25969", "https://github.com/ggml-org/llama.cpp/pull/26511", "https://github.com/ggml-org/llama.cpp/commit/cf06ad7dfe79e7bf2934150d4fefe1ce8db05490"], "fixes": ["10271+dfsg-1"], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-116467", "noindex": false, "published": "2026-10-26T18:15:14.725Z", "modified": "2026-10-26T19:34:25.208Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X", "severity": "medium", "epss": 0.00638, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116467", "title": "ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion", "description": "A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The project was informed of the problem early through a pull request but has not reacted yet.", "references": ["https://vuldb.com/vuln/426361", "https://vuldb.com/vuln/426361/cti", "https://vuldb.com/cve/CVE-2026-116467"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-116096", "noindex": false, "published": "2026-10-25T23:00:24.282Z", "modified": "2026-10-26T16:38:49.498Z", "cvss": 4.8, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "severity": "medium", "epss": 0.00124, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-116096", "title": "ggml-org llama.cpp Pocket-TTS pockettts-gen.cpp list_pockettts_state_slots out-of-bounds write", "description": "A weakness has been identified in ggml-org llama.cpp. Affected by this issue is the function list_pockettts_state_slots of the file tools/mtmd/models/pockettts-gen.cpp of the component Pocket-TTS. This manipulation of the argument mmproj causes out-of-bounds write. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version b11796 can resolve this issue. Patch name: 0a1ef309cdbb9f2024f58a38fb4c42352c5db569. The affected component should be upgraded. The reported heap out‑of‑bounds write (gen‑audio / pocket‑tts state_out path) is no longer a silent exploitable heap wri", "references": ["https://vuldb.com/vuln/426164", "https://vuldb.com/vuln/426164/cti", "https://vuldb.com/cve/CVE-2026-116096"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-107183", "noindex": false, "published": "2026-10-07T13:35:41.675Z", "modified": "2026-10-07T14:37:12.658Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "critical", "epss": 0.00417, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-107183", "title": "llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser", "description": "llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling current_tool pointer. Attackers can submit a chat_parser in a POST /completion request emitting a tool-id after a tool-close tag to crash llama-server and shape a heap write primitive.", "references": ["https://github.com/ggml-org/llama.cpp/pull/29942", "https://github.com/ggml-org/llama.cpp/commit/dbe4c3ed42343f0a7ba0fd7e808ffeaca404d29f", "https://github.com/ggml-org/llama.cpp/blob/bed0a856606ee4a24a164066f73d2379447033f5/common/chat-peg-parser.cpp#L343-L355"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-86317", "noindex": false, "published": "2026-09-07T14:15:15.855Z", "modified": "2026-09-08T15:00:51.658Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X", "severity": "medium", "epss": 0.00701, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-86317", "title": "ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion", "description": "A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be carried out remotely. The reported GitHub issue was closed automatically due to inactivity.", "references": ["https://vuldb.com/vuln/399508", "https://vuldb.com/vuln/399508/cti", "https://vuldb.com/cve/CVE-2026-86317"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-52132", "noindex": false, "published": "2026-09-01T00:00:00.000Z", "modified": "2026-09-02T13:47:15.740Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00588, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-52132", "title": "CVE-2026-52132", "description": "llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n value in a POST request to /rerank.", "references": ["https://github.com/ggml-org/llama.cpp", "https://blog.ph4nt0m.xyz/ko/cves/cve-2026-52132/", "https://nvd.nist.gov/vuln/detail/CVE-2026-52132"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-52131", "noindex": false, "published": "2026-09-01T00:00:00.000Z", "modified": "2026-09-02T18:23:15.584Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "severity": "high", "epss": 0.00432, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-52131", "title": "CVE-2026-52131", "description": "llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.", "references": ["https://github.com/ggml-org/llama.cpp", "https://blog.ph4nt0m.xyz/ko/cves/cve-2026-52130/", "https://nvd.nist.gov/vuln/detail/CVE-2026-52131"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-52130", "noindex": false, "published": "2026-09-01T00:00:00.000Z", "modified": "2026-09-01T18:20:16.537Z", "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "severity": "high", "epss": 0.00493, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-52130", "title": "CVE-2026-52130", "description": "llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.", "references": ["https://github.com/ggml-org/llama.cpp", "https://blog.ph4nt0m.xyz/ko/cves/cve-2026-52130/", "https://nvd.nist.gov/vuln/detail/CVE-2026-52130"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-78148", "noindex": false, "published": "2026-08-23T23:15:11.836Z", "modified": "2026-08-24T17:49:30.355Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X", "severity": "medium", "epss": 0.00724, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-78148", "title": "ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference", "description": "A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.", "references": ["https://vuldb.com/vuln/394535", "https://vuldb.com/vuln/394535/cti", "https://vuldb.com/cve/CVE-2026-78148"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-78147", "noindex": false, "published": "2026-08-23T23:00:13.111Z", "modified": "2026-08-27T14:37:49.255Z", "cvss": 6.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X", "severity": "medium", "epss": 0.00564, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-78147", "title": "ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization", "description": "A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/op_params results in deserialization. The attack may be initiated remotely. This vulnerability is distinct from CVE-2026-34159 (GHSA-j8rj-fmpv-wcxw, PR #20908), which only added a buffer==nullptr rejection in create_node() and does not validate op or op_params. The reported GitHub issue was closed automatically due to inactivity.", "references": ["https://vuldb.com/vuln/394534", "https://vuldb.com/vuln/394534/cti", "https://vuldb.com/cve/CVE-2026-78147"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-39909", "noindex": false, "published": "2026-08-21T17:16:30.810Z", "modified": "2026-09-03T05:00:09.488606894Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "severity": "critical", "epss": null, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-39909", "title": "DEBIAN-CVE-2026-39909", "description": "DEBIAN-CVE-2026-39909", "references": ["https://security-tracker.debian.org/tracker/CVE-2026-39909", "https://osv.dev/vulnerability/DEBIAN-CVE-2026-39909"], "fixes": ["8611+dfsg-1"], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-43632", "noindex": false, "published": "2026-08-06T15:53:19.379Z", "modified": "2026-08-14T16:49:56.563Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "critical", "epss": 0.00476, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-43632", "title": "llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints", "description": "llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/count_tokens) that bypass the task queue and access ctx_server.vocab directly on HTTP worker threads. Attackers can exploit a time-of-check-time-of-use race condition where the main thread destroys and frees vocab after the synchronization lock is released but before the handler finishes using it, causing a crash or potential code execution when --sleep-idle-seconds is configured.", "references": ["https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches", "https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-in-tokenization-endpoints", "https://nvd.nist.gov/vuln/detail/CVE-2026-43632"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-43631", "noindex": false, "published": "2026-08-06T15:52:09.915Z", "modified": "2026-08-14T16:49:55.913Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "critical", "epss": 0.00573, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-43631", "title": "llama.cpp b7492–b9060 Use-After-Free RCE via llama-server", "description": "llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending requests to affected endpoints while the server transitions to sleep mode, causing concurrent worker threads to dereference a freed vocab pointer that can be reclaimed with attacker-controlled data to achieve remote code execution.", "references": ["https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches", "https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-rce-via-llama-server", "https://nvd.nist.gov/vuln/detail/CVE-2026-43631"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-43630", "noindex": false, "published": "2026-08-06T15:50:55.022Z", "modified": "2026-10-22T18:15:34.480Z", "cvss": 6.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N", "severity": "medium", "epss": 0.00498, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-43630", "title": "llama.cpp b4882-b8487 Out-of-Bounds Read Information Disclosure", "description": "llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seq_id value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and facilitating further exploitation.", "references": ["https://github.com/ggml-org/llama.cpp", "https://github.com/ggml-org/llama.cpp/commit/f93c09e2673090b59802f2552848a1cac70598b0", "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"], "fixes": ["8611+dfsg-1"], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-43629", "noindex": false, "published": "2026-08-06T15:48:41.246Z", "modified": "2026-08-14T16:49:54.546Z", "cvss": 9.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "critical", "epss": 0.00698, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-43629", "title": "llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore", "description": "llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the state_read_data() function computes write size without overflow checking, allowing attackers with write access to the slot_save_path directory to corrupt heap memory. Attackers can craft malicious state files where cell_count multiplication overflows or exceeds tensor buffer allocation to write attacker-controlled bytes past buffer boundaries, potentially resulting in heap metadata corruption, model weight corruption, or arbitrary code execution via function pointer overwrite.", "references": ["https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches", "https://www.vulncheck.com/advisories/llama-cpp-b4882-b9058-buffer-overflow-in-kv-cache-state-restore", "https://nvd.nist.gov/vuln/detail/CVE-2026-43629"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-43628", "noindex": false, "published": "2026-08-06T15:45:52.293Z", "modified": "2026-08-14T16:49:53.415Z", "cvss": 8.5, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00234, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-43628", "title": "llama.cpp b3978–b9058 Integer Underflow via DRY Sampler", "description": "llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dry_allowed_length set to INT32_MIN to the /v1/completions or /v1/chat/completions endpoints. Attackers can exploit this vulnerability to crash the server with SIGSEGV causing denial of service for all connected users, or corrupt token sampling probabilities by reading garbage values from memory before the allocated buffer.", "references": ["https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches", "https://www.vulncheck.com/advisories/llama-cpp-b3978-b9058-integer-underflow-via-dry-sampler", "https://nvd.nist.gov/vuln/detail/CVE-2026-43628"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-43627", "noindex": false, "published": "2026-08-06T15:40:19.714Z", "modified": "2026-08-14T16:49:52.722Z", "cvss": 8.5, "cvss_vector": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.00201, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-43627", "title": "llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function", "description": "llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundaries.", "references": ["https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches", "https://www.vulncheck.com/advisories/llama-cpp-b1283-b9058-integer-overflow-in-llama-batch-init-function", "https://nvd.nist.gov/vuln/detail/CVE-2026-43627"], "fixes": [], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}, {"id": "CVE-2026-70640", "noindex": false, "published": "2026-08-06T15:38:22.994Z", "modified": "2026-08-14T16:51:39.415Z", "cvss": 7.3, "cvss_vector": "CVSS:4.0/AV:L/AC:H/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "severity": "high", "epss": 0.0024, "kev": false, "exploits": [], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}], "path": "vulns/cve-2026-70640", "title": "llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp", "description": "llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() and free_1context() lack synchronization, allowing Thread A to operate on freed memory while Thread B concurrently frees the llama_context. Attackers can exploit this by performing heap spray with attacker-controlled data containing a fake vtable to hijack the vtable pointer at offset +0x30, causing llama_batch_allocr::clear() to dereference arbitrary memory and achieve remote code execution.", "references": ["https://github.com/ggml-org/llama.cpp/releases/tag/b7446", "https://github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388", "https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"], "fixes": ["7593+dfsg-1"], "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}]}], "total": 34, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 2, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "llama.cpp", "path": "vulns/debian-14/llama.cpp", "ecosystem": "Debian:14"}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": [], "stats": {"recent": 6, "kev": 0}, "lastmod": "2026-10-27T14:14:10.931Z", "early_advisories": [], "license": "Vous pouvez librement utiliser la sélection de PatchFirst et nos ajouts (priorités, alertes précoces, textes, synthèses et agrégats) pour vos propres besoins, y compris les activités internes de votre entreprise. La revente, la distribution commerciale et la mise en miroir massive de cette sélection ou de ces ajouts nécessitent un accord écrit avec l’opérateur. Lors de toute utilisation ou publication de la sélection ou de nos ajouts, citez PatchFirst (https://patchfirst.dev/vulns/) avec ce lien vers la page du flux de votre région. Les enregistrements originaux des sources ouvertes restent soumis à leurs licences et conditions respectives. Ces conditions ne limitent pas vos droits sur les données originales, que vous pouvez obtenir directement auprès de ces sources.", "terms_url": "https://patchfirst.dev/fr/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://patchfirst.dev/vulns/"}, "source_changes": "PatchFirst sélectionne, normalise et combine les enregistrements ; des synthèses et des traductions peuvent être ajoutées. Les actualités sont accompagnées d’un lien vers la source originale dans chaque entrée.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Les licences des bases d’origine varient ; voir le catalogue des sources."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Évaluations publiques gratuites ; mention de la source demandée (FIRST EPSS, évaluations produites par Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}