CVE-2026-34159
criticalpriority · track · 11EPSS 0.016 · 76 %ileexploit · PoCEUUSEPSS · scored 2026-10-27
llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPH_COMPUTE messages. Combined with pointer leaks from ALLOC_BUFFER/BUFFER_GET_BASE, this gives full ASLR bypass and remote code execution. No authentication required, just TCP access to the RPC server port. This issue has been patched in version b8492.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- TeamN4C/SG-2026-0021CVE-2026-34159 PoC and exploitPoC · poc_in_github
affected products (2)
Products and version ranges known to be affected.
also known as (2)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- https://github.com/ggml-org/llama.cpp/commit/39bf0d3c6a95803e0f41aaba069ffbee26721042cnnvd
- https://github.com/ggml-org/llama.cpp/pull/20908cnnvd
- https://github.com/ggml-org/llama.cpp/releasesPatchcnnvd
- https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-j8rj-fmpv-wcxwcnnvd
- https://github.com/ggml-org/llama.cpp/commit/39bf0d3c6a95803e0f41aaba069ffbee26721042enisa_euvd
- https://github.com/ggml-org/llama.cpp/pull/20908enisa_euvd
- https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-j8rj-fmpv-wcxwenisa_euvd
- https://github.com/ggml-org/llama.cpp/commit/39bf0d3c6a95803e0f41aaba069ffbee26721042Patchnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan