High severity · published Aug 6, 2026
CVE-2026-43627
llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundaries.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 10% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LL
llama.cpp · ggml-org
b1283 through b9058 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-43627
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-43627
Patch
https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches
Mitigation
https://www.vulncheck.com/advisories/llama-cpp-b1283-b9058-integer-overflow-in-llama-batch-init-function
More from llama.cpp
9.8
CVE-2026-34159
llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
9.8
CVE-2026-21869
llama.cpp has Out-of-bounds Write in llama-server
8.9
CVE-2025-53630
Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf
8.8
CVE-2025-52566
llama.cpp tokenizer signed vs. unsigned heap overflow
8.8
CVE-2025-49847
llama.cpp Vulnerable to Buffer Overflow via Malicious GGUF Model