PatchTheCEVllama.cpp vulnerabilities and fixes
Recent CVEs affecting llama.cpp, with upgrade or downgrade steps. 10 tracked.
llama.cpp has 10 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 10. Most recent: 2026-08-06. Highest priority: CVE-2026-43629 (score 46/100).
- CVE-2026-43629 HIGH 8.1 UPGRADE llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restor
- CVE-2026-43631 HIGH 8.1 UPGRADE llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer o
- CVE-2026-43632 HIGH 8.1 UPGRADE llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affect
- CVE-2026-70640 HIGH 7.0 UPGRADE llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Androi
- CVE-2026-43622 HIGH 7.8 UPGRADE llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper wher
- CVE-2026-43628 HIGH 7.8 UPGRADE llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the
- CVE-2026-70638 HIGH 7.8 UPGRADE llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrappe
- CVE-2026-43627 HIGH 7.8 UPGRADE llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() funct
- CVE-2026-70639 MEDIUM 5.5 UPGRADE llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI
- CVE-2026-43630 MEDIUM 6.5 UPGRADE llama.cpp builds b4882 before b8487 contain an out-of-bounds read vulnerability in the recurrent memory state
FAQ
How do I fix llama.cpp vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is llama.cpp being exploited right now?
None of the tracked llama.cpp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which llama.cpp CVE should I patch first?
CVE-2026-43629 currently ranks highest (46/100): llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restor.