CVE-2026-43629: llama.cpp from b4882 (inclusive), through b9058 (inclusive), b4882 through b9058, 0.16.1 through 0.17.1

Affected technology

llama.cpp · from b4882 (inclusive), through b9058 (inclusive)
ggml

llama.cpp · b4882 through b9058, 0.16.1 through 0.17.1
ggml-org

Description’s affected range: through b9058

Component: Not specified by the source
Function: computes, pointer

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Attackers can craft malicious state files where cell_count multiplication overflows or exceeds tensor buffer allocation to write attacker-controlled bytes past buffer boundaries, potentially resulting in heap metadata corruption, model weight corruption, or arbitrary code execution via function pointer overwrite. Vendor/CNA’s CVSS 4.0 assessment (base score 9.2/10) rates confidentiality, integrity and availability impact as high.