llama.cpp Security Patches

Security patches for unpatched vulnerabilities in llama.cpp, discovered by Cyera Research.

Background

Between July 2025 and June 2026, we reported 10 vulnerabilities to the llama.cpp project through GitHub Security Advisories and MITRE. All advisories were closed by the maintainer without fixes or CVE assignment. We submitted a public PR with patches in June 2026 — it was also closed without merging.

VulnCheck allocated 10 CVE IDs after both the vendor and MITRE failed to act. Three of the original IDs (CVE-2026-43623, CVE-2026-43624, CVE-2026-43626) were subsequently replaced by CVE-2026-70638, CVE-2026-70639, and CVE-2026-70640 respectively.

These patches are provided so that users and downstream projects can protect themselves.

Unpatched Vulnerabilities

Applying Patches

Apply a single fix:

cd /path/to/llama.cpp
git apply /path/to/patches/CVE-2026-43631-server-sleep-uaf.patch

Apply all fixes at once:

cd /path/to/llama.cpp
git apply /path/to/patches/all-fixes.patch

If git apply fails due to context changes in newer llama.cpp versions, try with --3way:

git apply --3way /path/to/patches/all-fixes.patch

Disclosure Timeline

Researchers

• Vladimir Tokarev (@G1ND1L4) — Vulnerability Research Tech Lead, Cyera
• Ofek Itach (@ofekitach) — Security Research Team Lead, Cyera

Related

• DEF CON 34 Talk: Breaking Local AI Runtimes
• Original PR with patches (closed)