CVE-2026-34159
CVE-2026-34159 · llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
This page contains facts from public vulnerability sources. Check the original advisory before updating.
llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPH_COMPUTE messages. Combined with pointer leaks from ALLOC_BUFFER/BUFFER_GET_BASE, this gives full ASLR bypass and remote code execution. No authentication required, just TCP access to the RPC server port. This issue has been patched in version b8492.
CVSS 9.8 · Critical · EPSS 1.6% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
llama.cpp
- Versions
- < b8492: Affected
No fix published
llama.cpp Debian:14
- Versions
- 5151+dfsg-1~exp2
- 5151+dfsg-1~exp3
- 5318+dfsg-1
- 5318+dfsg-2
- 5713+dfsg-1
- 5760+dfsg-1
- 5760+dfsg-2
- 5760+dfsg-3
- 5760+dfsg-4
- 5882+dfsg-1
- 5882+dfsg-2
- 5882+dfsg-3
- 5882+dfsg-3~exp1
- 5882+dfsg-3~exp2
- 5882+dfsg-3~exp3
- 5882+dfsg-4
- 6641+dfsg-1
- 6641+dfsg-2
- 6641+dfsg-3
- 7593+dfsg-1
- 7593+dfsg-2
- 7593+dfsg-3
- 7965+dfsg-1
- 8064+dfsg-1
- 8064+dfsg-2
- 8461+dfsg-1
- Affected ranges
- ECOSYSTEM: < 8611+dfsg-1
Update to 8611+dfsg-1
llama.cpp Ubuntu:25.10
- Versions
- 5318+dfsg-1
- 5318+dfsg-2
- 5713+dfsg-1
- 5760+dfsg-1
- 5760+dfsg-3
- 5760+dfsg-4
- 5882+dfsg-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published