rohithronanki/CVE-2026-34159-Vulnerability-Research-Analysis-Detection

PoC

Critical buffer validation bypass in deserialize_tensor() (llama.cpp < b8492). Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPH_COMPUTE. ASLR bypass + RCE over TCP 50052.

view exploit source poc_in_githubauthor rohithronankipublished 2026-05-04catalog poc_in_github
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2026-34159US—Exploit
llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan