CVE-2026-43629

Name of the Vulnerable Software and Affected Versions llama.cpp versions b4882 through b9058

Description A heap buffer overflow exists in the KV cache state restore path. The state read data() function calculates the write size without performing overflow checks. An attacker with write access to the slot save path directory can exploit this by creating malicious state files. By causing the cell count multiplication to overflow or exceed the tensor buffer allocation, the attacker can write controlled bytes beyond buffer boundaries. This may lead to heap metadata corruption, model weight corruption, or arbitrary code execution through the overwrite of function pointers.

Recommendations Update llama.cpp to a version later than b9058.