CVE-2026-43630: llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure
llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seqid value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and facilitating further exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43630?
CVE-2026-43630 has a severity rating of medium, with a score of 6.5.
How do I fix CVE-2026-43630?
To fix CVE-2026-43630, update to a version of llama.cpp that applies the necessary security patches for this vulnerability.
What does CVE-2026-43630 expose?
CVE-2026-43630 allows attackers with write access to read memory beyond the allocated cells array, leading to potential information disclosure.
Which versions of llama.cpp are affected by CVE-2026-43630?
CVE-2026-43630 affects versions of llama.cpp built between b5702 and b7653.
Who is at risk due to CVE-2026-43630?
Users with write access to the slot save directory of affected versions of llama.cpp are at risk due to CVE-2026-43630.