CVE-2026-43630
- Source
- https://cve.org/CVERecord?id=CVE-2026-43630
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43630.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-43630
- Downstream
- Published
- 2026-08-06T15:50:55.022Z
- Modified
- 2026-08-08T09:31:01.622889Z
- Severity
-
- 6.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure
- Details
-
llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state restore path that allows attackers with write access to the slot save directory to read memory past the end of the allocated cells array. Attackers can craft a malicious slot file with an oversized seq_id value to trigger an out-of-bounds read that leaks heap data including pointer values into server logs, defeating ASLR protections and facilitating further exploitation.
- Database specific
{ "cna_assigner": "VulnCheck", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43630.json", "cwe_ids": [ "CWE-125", "CWE-209" ] }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43630.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-43630
- https://www.vulncheck.com/advisories/llama-cpp-b5702-b7653-out-of-bounds-read-information-disclosure
- https://github.com/ggml-org/llama.cpp/commit/f93c09e2673090b59802f2552848a1cac70598b0
- https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches
- https://github.com/ggml-org/llama.cpp
Affected packages
Git / github.com/ggml-org/llama.cpp
Affected versions
0.*
0.17.1
Other
b5702
b5703
b5704
b5706
b5707
b5708
b5709
b5711
b5712
b5713
b5714
b5715
b5716
b5717
b5718
b5719
b5720
b5721
b5722
b5723
b5726
b5728
b5729
b5731
b5733
b5734
b5735
b5736
b5737
b5738
b5740
b5742
b5743
b5744
b5745
b5747
b5749
b5751
b5752
b5753
b5754
b5755
b5756
b5757
b5759
b5760
b5769
b5770
b5771
b5772
b5773
b5774
b5775
b5777
b5778
b5780
b5782
b5783
b5784
b5785
b5787
b5788
b5792
b5793
b5794
b5795
b5797
b5798
b5801
b5802
b5803
b5804
b5808
b5809
b5811
b5812
b5814
b5815
b5816
b5817
b5819
b5820
b5821
b5822
b5823
b5824
b5825
b5826
b5827
b5828
b5829
b5830
b5831
b5832
b5833
b5834
b5835
b5836
b5837
b5838
b5839
b5840
b5841
b5843
b5844
b5845
b5846
b5847
b5848
b5849
b5851
b5852
b5853
b5854
b5855
b5856
b5857
b5858
b5859
b5860
b5861
b5862
b5863
b5864
b5865
b5866
b5867
b5868
b5869
b5870
b5872
b5873
b5874
b5875
b5876
b5880
b5882
b5884
b5886
b5887
b5888
b5889
b5890
b5891
b5892
b5893
b5894
b5895
b5896
b5897
b5898
b5899
b5900
b5901
b5902
b5904
b5908
b5909
b5910
b5911
b5912
b5913
b5914
b5915
b5916
b5919
b5920
b5921
b5922
b5923
b5924
b5927
b5928
b5929
b5930
b5932
b5933
b5934
b5935
b5936
b5937
b5940
b5941
b5942
b5943
b5949
b5950
b5952
b5953
b5954
b5956
b5957
b5958
b5959
b5960
b5961
b5962
b5963
b5965
b5966
b5967
b5968
b5970
b5972
b5973
b5975
b5976
b5978
b5979
b5980
b5981
b5984
b5985
b5986
b5987
b5988
b5989
b5990
b5992
b5993
b5994
b5995
b5996
b5997
b5998
b5999
b6000
b6001
b6002
b6011
b6012
b6013
b6014
b6015
b6016
b6017
b6018
b6020
b6022
b6023
b6024
b6025
b6026
b6027
b6029
b6030
b6031
b6032
b6035
b6036
b6037
b6038
b6039
b6040
b6041
b6042
b6043
b6044
b6045
b6047
b6048
b6049
b6050
b6051
b6052
b6054
b6055
b6056
b6057
b6058
b6059
b6060
b6061
b6062
b6063
b6064
b6065
b6066
b6067
b6070
b6071
b6073
b6074
b6075
b6076
b6078
b6079
b6080
b6081
b6082
b6083
b6084
b6085
b6087
b6088
b6089
b6090
b6092
b6093
b6095
b6096
b6097
b6098
b6099
b6100
b6101
b6102
b6103
b6104
b6105
b6106
b6109
b6111
b6113
b6114
b6115
b6116
b6117
b6118
b6119
b6121
b6122
b6123
b6124
b6128
b6129
b6131
b6132
b6133
b6134
b6135
b6136
b6137
b6138
b6139
b6140
b6141
b6143
b6144
b6148
b6149
b6150
b6152
b6153
b6173
b6174
b6175
b6176
b6177
b6178
b6179
b6180
b6181
b6182
b6183
b6184
b6185
b6187
b6188
b6189
b6190
b6191
b6193
b6195
b6199
b6201
b6202
b6204
b6205
b6207
b6208
b6209
b6210
b6213
b6214
b6215
b6218
b6225
b6228
b6229
b6235
b6236
b6237
b6238
b6239
b6240
b6241
b6242
b6243
b6244
b6245
b6246
b6247
b6248
b6249
b6250
b6251
b6254
b6255
b6257
b6258
b6261
b6262
b6264
b6265
b6267
b6269
b6271
b6272
b6273
b6274
b6275
b6276
b6277
b6278
b6279
b6280
b6282
b6283
b6284
b6285
b6286
b6287
b6289
b6290
b6291
b6292
b6293
b6294
b6295
b6297
b6298
b6299
b6300
b6301
b6303
b6305
b6307
b6309
b6310
b6311
b6312
b6313
b6314
b6315
b6316
b6317
b6318
b6322
b6323
b6324
b6325
b6327
b6328
b6329
b6330
b6331
b6332
b6334
b6335
b6337
b6340
b6341
b6343
b6344
b6346
b6347
b6348
b6349
b6350
b6351
b6352
b6353
b6354
b6355
b6356
b6357
b6358
b6360
b6361
b6362
b6364
b6365
b6367
b6368
b6370
b6371
b6372
b6373
b6374
b6376
b6377
b6379
b6380
b6381
b6382
b6383
b6384
b6386
b6387
b6389
b6390
b6391
b6392
b6393
b6394
b6396
b6397
b6399
b6401
b6402
b6403
b6404
b6405
b6406
b6407
b6408
b6409
b6412
b6414
b6415
b6416
b6418
b6419
b6421
b6423
b6424
b6427
b6428
b6429
b6430
b6431
b6432
b6434
b6435
b6436
b6440
b6441
b6442
b6443
b6444
b6445
b6447
b6451
b6469
b6470
b6471
b6473
b6474
b6475
b6476
b6477
b6478
b6479
b6480
b6482
b6483
b6484
b6488
b6490
b6491
b6492
b6493
b6494
b6496
b6497
b6498
b6499
b6500
b6501
b6502
b6503
b6504
b6505
b6506
b6507
b6508
b6509
b6510
b6511
b6512
b6513
b6514
b6515
b6516
b6517
b6518
b6519
b6521
b6522
b6523
b6524
b6527
b6528
b6529
b6532
b6533
b6534
b6535
b6536
b6541
b6543
b6544
b6545
b6548
b6549
b6550
b6556
b6557
b6558
b6565
b6567
b6568
b6569
b6572
b6574
b6575
b6576
b6578
b6580
b6582
b6583
b6585
b6586
b6587
b6591
b6593
b6594
b6595
b6598
b6601
b6602
b6603
b6604
b6605
b6606
b6607
b6608
b6610
b6611
b6612
b6613
b6615
b6617
b6619
b6620
b6621
b6622
b6623
b6624
b6627
b6628
b6634
b6635
b6638
b6640
b6641
b6642
b6643
b6644
b6646
b6647
b6648
b6650
b6651
b6653
b6660
b6661
b6662
b6663
b6665
b6666
b6670
b6671
b6672
b6673
b6676
b6678
b6679
b6680
b6682
b6683
b6684
b6685
b6686
b6687
b6688
b6689
b6690
b6691
b6692
b6695
b6697
b6699
b6700
b6701
b6702
b6703
b6704
b6706
b6708
b6709
b6710
b6711
b6713
b6714
b6715
b6717
b6718
b6719
b6721
b6724
b6725
b6726
b6727
b6728
b6729
b6730
b6732
b6733
b6735
b6736
b6737
b6738
b6739
b6741
b6743
b6745
b6746
b6747
b6748
b6750
b6751
b6752
b6753
b6754
b6755
b6756
b6757
b6758
b6759
b6760
b6761
b6762
b6763
b6764
b6765
b6766
b6767
b6768
b6769
b6770
b6773
b6774
b6775
b6776
b6777
b6778
b6779
b6780
b6782
b6783
b6784
b6785
b6786
b6788
b6789
b6790
b6791
b6792
b6793
b6794
b6795
b6799
b6800
b6801
b6802
b6804
b6808
b6810
b6811
b6812
b6813
b6814
b6815
b6816
b6817
b6818
b6821
b6822
b6823
b6824
b6825
b6826
b6827
b6829
b6830
b6833
b6834
b6835
b6836
b6837
b6838
b6839
b6840
b6841
b6843
b6844
b6845
b6846
b6847
b6848
b6849
b6850
b6851
b6852
b6853
b6854
b6855
b6856
b6857
b6858
b6859
b6860
b6861
b6862
b6863
b6864
b6865
b6866
b6868
b6869
b6870
b6871
b6872
b6873
b6874
b6875
b6876
b6877
b6878
b6879
b6880
b6881
b6882
b6883
b6884
b6885
b6886
b6887
b6888
b6889
b6890
b6891
b6894
b6895
b6896
b6897
b6898
b6900
b6901
b6904
b6905
b6906
b6907
b6908
b6909
b6910
b6912
b6915
b6916
b6919
b6920
b6922
b6923
b6924
b6927
b6929
b6931
b6932
b6933
b6934
b6935
b6936
b6937
b6940
b6941
b6942
b6943
b6945
b6947
b6948
b6949
b6951
b6953
b6954
b6955
b6957
b6958
b6959
b6960
b6961
b6962
b6963
b6965
b6966
b6967
b6968
b6969
b6970
b6971
b6972
b6973
b6974
b6975
b6976
b6977
b6978
b6979
b6980
b6981
b6982
b6983
b6984
b6985
b6986
b6987
b6988
b6989
b6990
b6992
b6993
b6994
b6995
b6996
b6999
b7002
b7003
b7005
b7007
b7008
b7009
b7010
b7011
b7012
b7013
b7014
b7015
b7016
b7017
b7018
b7020
b7021
b7022
b7023
b7024
b7025
b7027
b7028
b7030
b7031
b7032
b7033
b7034
b7035
b7037
b7039
b7041
b7042
b7044
b7045
b7046
b7047
b7048
b7049
b7050
b7051
b7052
b7053
b7054
b7055
b7057
b7058
b7059
b7060
b7061
b7062
b7063
b7064
b7065
b7066
b7067
b7070
b7071
b7075
b7076
b7077
b7078
b7079
b7081
b7082
b7083
b7084
b7085
b7086
b7087
b7088
b7089
b7090
b7091
b7096
b7097
b7099
b7100
b7101
b7102
b7103
b7106
b7107
b7108
b7109
b7110
b7111
b7112
b7113
b7117
b7118
b7120
b7122
b7123
b7124
b7126
b7127
b7128
b7129
b7130
b7131
b7132
b7134
b7136
b7137
b7138
b7139
b7140
b7141
b7142
b7144
b7146
b7148
b7149
b7150
b7151
b7152
b7154
b7157
b7158
b7159
b7160
b7161
b7162
b7163
b7164
b7165
b7166
b7167
b7168
b7169
b7170
b7171
b7172
b7175
b7176
b7177
b7178
b7179
b7180
b7181
b7182
b7183
b7184
b7185
b7186
b7187
b7188
b7189
b7190
b7191
b7192
b7193
b7194
b7195
b7196
b7197
b7198
b7199
b7200
b7201
b7202
b7203
b7204
b7205
b7206
b7207
b7208
b7209
b7210
b7211
b7212
b7213
b7214
b7215
b7216
b7217
b7218
b7219
b7220
b7222
b7223
b7224
b7225
b7227
b7229
b7230
b7231
b7233
b7235
b7236
b7237
b7239
b7240
b7243
b7244
b7245
b7247
b7248
b7250
b7251
b7252
b7253
b7255
b7256
b7261
b7262
b7263
b7264
b7265
b7266
b7268
b7270
b7271
b7273
b7274
b7275
b7276
b7278
b7285
b7293
b7296
b7298
b7300
b7301
b7302
b7306
b7307
b7310
b7311
b7312
b7313
b7314
b7315
b7316
b7317
b7318
b7324
b7325
b7327
b7328
b7329
b7330
b7331
b7332
b7333
b7334
b7335
b7336
b7337
b7339
b7340
b7342
b7343
b7345
b7347
b7348
b7349
b7350
b7351
b7352
b7353
b7354
b7356
b7358
b7360
b7361
b7362
b7363
b7364
b7366
b7368
b7369
b7370
b7371
b7372
b7374
b7375
b7376
b7378
b7379
b7380
b7381
b7382
b7383
b7384
b7385
b7386
b7387
b7388
b7389
b7393
b7394
b7397
b7398
b7399
b7400
b7401
b7402
b7404
b7405
b7406
b7410
b7411
b7413
b7414
b7415
b7416
b7418
b7422
b7423
b7426
b7429
b7432
b7433
b7434
b7436
b7437
b7438
b7439
b7440
b7441
b7442
b7444
b7445
b7446
b7464
b7470
b7472
b7475
b7476
b7480
b7481
b7482
b7483
b7484
b7486
b7487
b7488
b7489
b7490
b7491
b7492
b7493
b7495
b7496
b7497
b7498
b7499
b7501
b7502
b7503
b7506
b7507
b7508
b7509
b7510
b7511
b7512
b7513
b7515
b7516
b7519
b7520
b7522
b7524
b7525
b7526
b7527
b7529
b7530
b7531
b7536
b7538
b7539
b7540
b7541
b7542
b7543
b7544
b7545
b7547
b7548
b7549
b7550
b7551
b7552
b7553
b7554
b7555
b7556
b7557
b7558
b7560
b7561
b7562
b7563
b7564
b7565
b7566
b7567
b7568
b7569
b7571
b7572
b7574
b7577
b7579
b7580
b7581
b7582
b7583
b7585
b7588
b7589
b7590
b7591
b7592
b7593
b7595
b7598
b7599
b7600
b7601
b7603
b7605
b7607
b7608
b7609
b7610
b7611
b7612
b7613
b7614
b7615
b7616
b7617
b7618
b7619
b7620
b7621
b7622
b7623
b7624
b7625
b7626
b7628
b7630
b7631
b7632
b7633
b7634
b7635
b7636
b7638
b7639
b7640
b7641
b7642
b7644
b7645
b7646
b7647
b7648
b7649
b7650
b7651
b7652
b7653
b7654
b7655
b7656
b7657
b7658
b7662
b7664
b7666
b7667
b7668
b7672
b7673
b7675
b7676
b7677
b7678
b7679
b7680
b7681
b7682
b7684
b7685
b7687
b7688
b7689
b7690
b7691
b7692
b7694
b7697
b7698
b7699
b7700
b7703
b7704
b7705
b7707
b7708
b7709
b7710
b7712
b7713
b7714
b7716
b7717
b7718
b7719
b7720
b7721
b7723
b7725
b7726
b7727
b7728
b7729
b7730
b7731
b7735
b7736
b7737
b7738
b7739
b7740
b7741
b7742
b7743
b7744
b7745
b7746
b7747
b7748
b7749
b7750
b7751
b7752
b7753
b7754
b7755
b7756
b7757
b7758
b7760
b7761
b7762
b7765
b7766
b7767
b7768
b7769
b7770
b7772
b7774
b7775
b7777
b7779
b7781
b7782
b7783
b7784
b7785
b7786
b7787
b7788
b7789
b7790
b7791
b7792
b7793
b7794
b7795
b7798
b7801
b7802
b7804
b7805
b7806
b7807
b7808
b7809
b7811
b7812
b7813
b7814
b7815
b7818
b7819
b7820
b7821
b7822
b7823
b7824
b7825
b7826
b7827
b7828
b7830
b7832
b7833
b7835
b7836
b7837
b7839
b7841
b7842
b7843
b7844
b7845
b7847
b7849
b7850
b7851
b7852
b7853
b7855
b7856
b7857
b7858
b7860
b7861
b7862
b7864
b7865
b7867
b7868
b7869
b7870
b7871
b7872
b7875
b7876
b7879
b7880
b7881
b7883
b7885
b7895
b7896
b7897
b7898
b7899
b7902
b7903
b7904
b7905
b7907
b7909
b7910
b7911
b7913
b7917
b7918
b7919
b7920
b7921
b7922
b7923
b7924
b7925
b7926
b7927
b7928
b7929
b7930
b7931
b7932
b7933
b7935
b7936
b7938
b7940
b7941
b7942
b7943
b7944
b7945
b7946
b7947
b7950
b7951
b7952
b7954
b7955
b7956
b7957
b7958
b7959
b7960
b7961
b7962
b7964
b7965
b7966
b7968
b7969
b7970
b7971
b7972
b7973
b7974
b7976
b7981
b7982
b7983
b7984
b7987
b7988
b7989
b7990
b7991
b7992
b7993
b7994
b7995
b7996
b7997
b7998
b7999
b8001
b8003
b8004
b8005
b8006
b8007
b8008
b8011
b8012
b8017
b8018
b8020
b8021
b8022
b8023
b8024
b8025
b8026
b8027
b8028
b8030
b8032
b8033
b8034
b8035
b8036
b8037
b8038
b8040
b8041
b8042
b8043
b8046
b8047
b8048
b8049
b8051
b8052
b8053
b8054
b8055
b8056
b8057
b8058
b8059
b8060
b8061
b8062
b8064
b8067
b8068
b8069
b8070
b8071
b8072
b8073
b8074
b8075
b8076
b8077
b8078
b8079
b8082
b8083
b8086
b8087
b8088
b8089
b8091
b8093
b8094
b8095
b8096
b8098
b8099
b8100
b8101
b8102
b8104
b8105
b8106
b8107
b8108
b8109
b8110
b8111
b8112
b8113
b8115
b8116
b8117
b8118
b8119
b8121
b8122
b8123
b8124
b8126
b8128
b8130
b8131
b8132
b8133
b8138
b8140
b8141
b8142
b8143
b8144
b8145
b8146
b8147
b8148
b8149
b8152
b8153
b8155
b8156
b8157
b8159
b8161
b8162
b8163
b8164
b8165
b8166
b8167
b8168
b8169
b8170
b8171
b8172
b8173
b8175
b8177
b8178
b8179
b8180
b8181
b8182
b8183
b8184
b8185
b8187
b8188
b8189
b8190
b8191
b8192
b8193
b8194
b8195
b8196
b8197
b8198
b8200
b8201
b8202
b8203
b8204
b8208
b8209
b8210
b8212
b8213
b8214
b8215
b8216
b8218
b8219
b8220
b8221
b8222
b8223
b8224
b8225
b8226
b8227
b8229
b8230
b8231
b8232
b8233
b8234
b8235
b8236
b8238
b8239
b8240
b8241
b8242
b8243
b8244
b8245
b8246
b8247
b8248
b8249
b8250
b8252
b8253
b8254
b8255
b8256
b8258
b8259
b8260
b8261
b8262
b8263
b8264
b8265
b8266
b8267
b8268
b8269
b8270
b8271
b8272
b8276
b8277
b8278
b8279
b8280
b8281
b8284
b8285
b8286
b8287
b8291
b8292
b8295
b8297
b8298
b8299
b8300
b8301
b8303
b8304
b8305
b8308
b8309
b8310
b8312
b8315
b8317
b8318
b8320
b8322
b8323
b8325
b8327
b8328
b8329
b8330
b8331
b8332
b8333
b8334
b8336
b8337
b8338
b8339
b8340
b8347
b8348
b8350
b8351
b8352
b8353
b8354
b8355
b8356
b8358
b8360
b8361
b8362
b8363
b8364
b8366
b8368
b8369
b8370
b8372
b8373
b8377
b8388
b8389
b8390
b8391
b8392
b8393
b8394
b8398
b8399
b8400
b8401
b8405
b8407
b8411
b8412
b8413
b8416
b8417
b8418
b8419
b8420
b8422
b8423
b8424
b8425
b8429
b8445
b8457
b8459
b8460
b8461
b8464
b8466
b8467
b8468
b8469
b8470
b8471
b8472
b8473
b8474
b8475
b8476
b8477
b8478
b8479
b8480
b8485
gguf-v0.*
gguf-v0.17.1
gguf-v0.18.0
Database specific
vanir_signatures
[
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"length": 1949.0,
"function_hash": "194396261493576078721254397332989877130"
},
"id": "CVE-2026-43630-0e4229dc",
"signature_type": "Function",
"source": "https://github.com/ggml-org/llama.cpp/commit/f93c09e2673090b59802f2552848a1cac70598b0",
"target": {
"function": "llama_memory_recurrent::state_read_meta",
"file": "src/llama-memory-recurrent.cpp"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"142956229253567011509255702164622149382",
"21122773997777580743718678473834658660",
"221726550131917718187510413614410899114",
"32425899504689817907277003082297786255",
"32447231828336081152507054039935081331"
]
},
"id": "CVE-2026-43630-6e9936e7",
"signature_type": "Line",
"source": "https://github.com/ggml-org/llama.cpp/commit/f93c09e2673090b59802f2552848a1cac70598b0",
"target": {
"file": "src/llama-memory-recurrent.cpp"
}
},
{
"signature_version": "v1",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"56588249667536302694297105685954967922",
"241643873480233882163838848623906036599",
"72544019406290378463263264509144620636",
"109643614965174570164526397889208220478",
"160680757549091709567077041810976581372",
"298668260287198322445968990430991934632",
"52180685400002041952069568983841393470",
"182276401951847773927906739021280076912",
"202543934640713651097350586065293424221",
"245194961472037423750564989261327186438",
"305443759090196783789807500784848953881",
"61918652702752778813629953929351747271",
"313036481509803028615629956059105012620",
"173197278746301581146830659332670107481",
"77571776991646957325154087870000996000",
"274458948425796180156562039866528103581",
"29298029400767429655154700611447050323",
"9509541460341927479130498728414931244",
"7281949488327462956385985581879044497",
"180233121721939596182729228295829504000",
"83201686993138514520784053312641888507",
"145133369899257481447590777039692626070",
"163395263892993784326440103639671077226",
"251291014927673962832981433284276099054",
"277879694569866572414838486484495188815",
"112664230760315069709859624984423709477",
"236804207258616440990132352485724186555",
"99445949951888581921602779931461735698",
"145624910628606311875029450510079516102",
"64950244542318159442000077222728221771",
"316867209590902948603677778330911082788",
"128742820174335459654703847104580756677"
]
},
"id": "CVE-2026-43630-6fbfcb1e",
"signature_type": "Line",
"source": "https://github.com/ggml-org/llama.cpp/commit/193ee38a1bc2aed807823112cf030edcae186892",
"target": {
"file": "ggml/src/ggml-cann/ggml-cann.cpp"
}
}
]
vanir_signatures_modified
"2026-08-08T09:31:01Z"
source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-43630.json"