Remote Code Execution in llama.cpp - Affected by Insecure RPC Backend
CVE-2026-34159
Key Information:
Badges
What is CVE-2026-34159?
The llama.cpp product has a critical vulnerability in its RPC backend where the deserialize_tensor() function fails to perform proper bounds validation if a tensor's buffer field is set to zero. This oversight allows unauthenticated attackers to exploit the system by reading and writing arbitrary process memory through specially crafted GRAPH_COMPUTE messages. The impact is severe, as it enables an attacker to bypass address space layout randomization (ASLR) and potentially execute arbitrary code remotely, requiring only TCP access to the RPC server port. The issue has been rectified in version b8492.
Affected Version(s)
llama.cpp < b8492
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.