Out-of-Bounds Read Vulnerability in Llama.cpp by GGML

CVE-2026-43630

What is CVE-2026-43630?

The Llama.cpp builds from b5702 to b7653 have a critical out-of-bounds read vulnerability in the recurrent memory state restore path. This flaw permits attackers with write access to the slot save directory to exploit oversized seq_id values, leading to memory being read beyond the allocated cells array. Such exploitation can result in the unauthorized disclosure of sensitive heap data, including pointer values, which are logged on the server. The leakage of this information presents a significant security risk by undermining Address Space Layout Randomization (ASLR) protections, enabling attackers to launch further targeted exploits.

References