CVE-2026-34159 Details
Description
llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPH_COMPUTE messages. Combined with pointer leaks from ALLOC_BUFFER/BUFFER_GET_BASE, this gives full ASLR bypass and remote code execution. No authentication required, just TCP access to the RPC server port. This issue has been patched in version b8492.
A critical remote code execution vulnerability has been identified in the llama.cpp RPC backend, affecting versions prior to b8492. The issue arises in the 'deserialize_tensor()' function, which fails to perform proper bounds validation when a tensor's buffer field is zero. This oversight allows an unauthenticated attacker to read and write arbitrary process memory by sending crafted GRAPH_COMPUTE messages. Exploitation of this vulnerability bypasses Address Space Layout Randomization (ASLR) and can be achieved with just TCP access to the RPC server port.
Users can update to llama.cpp version b8492 or later, where this vulnerability has been patched.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Apr 1, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/ggml-org/llama.cpp/commit/39bf0d3c6a95803e0f41aaba069ffbee26721042 | [email protected] | Patch |
| https://github.com/ggml-org/llama.cpp/pull/20908 | [email protected] | Issue TrackingPatch |
| https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-j8rj-fmpv-wcxw | [email protected] | ExploitVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ggml llama.cpp | < b8492 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 30, 2026 | Initial Analysis | [email protected] |
| Apr 1, 2026 | New CVE Received | [email protected] |