CVE-2026-43627

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1283 through b9058

Description An integer overflow occurs in the llama batch init() function when unchecked multiplications in malloc() calls wrap past INT32 MAX during allocation size calculations. An attacker can provide specially crafted parameters to trigger this overflow, leading to heap corruption. This may allow arbitrary code execution through batch operations that write beyond the allocated buffer boundaries.

Recommendations Update llama.cpp to a version later than b9058. As a temporary mitigation, restrict the use of the llama batch init() function with untrusted parameters.