Integer Overflow Vulnerability in llama.cpp by Vladimir Tokarev
CVE-2026-43627

8.5HIGH

Key Information:

Vendor

Ggml-org

Status
Llama.cpp
Vendor
CVE Published:
6 August 2026

What is CVE-2026-43627?

Versions of llama.cpp from b1283 to b9058 contain a vulnerability in the llama_batch_init() function, where unchecked multiplications during memory allocation can lead to integer overflow. This flaw could allow attackers to exploit the system by defining crafted parameters, resulting in heap corruption and potential arbitrary code execution through compromised batch operations. Prompt awareness and mitigation are essential to protect affected systems.

Affected Version(s)

llama.cpp b1283

llama.cpp b1283

llama.cpp 0.4.0 <= 0.17.1

References

https://github.com/Vladimir-tokarev-cyera/llama-cpp-secur...
mitigation
https://www.vulncheck.com/advisories/llama-cpp-b1283-b905...
third-party-advisory

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vladimir Tokarev (@G1ND1L4) - Vulnerability Research Tech Lead, Cyera
Ofek Itach (@ofekitach) - Security Research Team Lead, Cyera
.