CVE-2026-43627Disclosure(ggml / llama.cpp)

LOWCVSS 8.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundaries.

ggml CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Weakness type (CWE)

CWE-190CWE-680

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

llama.cpp

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

ggml

Products

llama.cpp

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Full discourse1 post

CyberSignal | Cybersecurity News@XQOPTRX46d
Disclosure
🤖 llama.cpp integer overflow could lead to code execution CVE-2026-43627 affects a range of llama.cpp builds. Unchecked multiplication during batch allocation can cause an integer overflow, leading to undersized heap allocations and possible heap corruption. Under the affected conditions, this could potentially result in arbitrary code execution. 🔎 Source: Tenable / CVE. #llamaCPP #LLM #AISecurity #CVE #CyberSecurity
Post summary
The post announces a new integer‑overflow vulnerability (CVE‑2026‑43627) in llama.cpp that can lead to arbitrary code execution, but provides no PoC, exploit code, patch, or evidence of active exploitation.
0000059
34 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ggml	llama.cpp	-	-	-

Explore more

Back to dashboard ggml CVEs llama.cpp vulnerabilities