{"id":"CVE-2026-43631","summary":"llama.cpp b7492–b9060 Use-After-Free RCE via llama-server","details":"llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending requests to affected endpoints while the server transitions to sleep mode, causing concurrent worker threads to dereference a freed vocab pointer that can be reclaimed with attacker-controlled data to achieve remote code execution.","modified":"2026-09-23T03:47:26.238622395Z","published":"2026-08-06T15:52:09.915Z","database_specific":{"unresolved_ranges":[{"source":"AFFECTED_FIELD","extracted_events":[{"introduced":"b7492"},{"last_affected":"b9060"}]},{"source":"CPE_FIELD","extracted_events":[{"introduced":"b7492"},{"last_affected":"b9060"}]},{"extracted_events":[{"introduced":"b7492"}],"source":"DESCRIPTION"}],"cna_assigner":"VulnCheck","cwe_ids":["CWE-362","CWE-416"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43631.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43631.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-43631"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-rce-via-llama-server"},{"type":"PACKAGE","url":"https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ggml-org/llama.cpp","events":[{"introduced":"ddcb75dd8ac42dc23eb84f13bb17670fe9f2d49b"},{"last_affected":"ad092246587b16299291056a78bf6f73f636f114"}],"database_specific":{"cpe":"cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"b7492"},{"last_affected":"b9060"}],"source":"CPE_RANGE"}}],"versions":["b9060","b9058","b9057","b9056","b9055","b9050","b9049","b9048","b9047","gguf-v0.19.0","b9045","b9041","b9038","b9037","b9033","b9031","b9030","b9029","b9028","b9026","b9025","b9023","b9022","b9020","b9019","b9018","b9016","b9015","b9014","b9012","b9010","b9009","b9008","b9006","b9004","b9002","b9000","b8999","b8998","b8996","b8995","b8994","b8992","b8991","b8990","b8989","b8987","b8986","b8982","b8984","b8983","b8981","b8980","b8979","b8978","b8977","b8974","b8973","b8972","b8971","b8970","b8969","b8968","b8967","b8966","b8964","b8963","b8962","b8960","b8958","b8957","b8956","b8955","b8954","b8953","b8952","b8951","b8950","b8949","b8948","b8947","b8946","b8944","b8943","b8941","b8940","b8937","b8936","b8935","b8934","b8933","b8925","b8931","b8929","b8927","b8926","b8924","b8922","b8920","b8919","b8918","b8917","b8916","b8914","b8913","b8912","b8911","b8909","b8908","b8907","b8906","b8905","b8902","b8901","b8895","b8893","b8892","b8891","b8890","b8889","b8888","b8887","b8886","b8885","b8884","b8883","b8882","b8881","b8880","b8878","b8876","b8875","b8874","b8873","b8872","b8871","b8870","b8869","b8868","b8864","b8863","b8862","b8861","b8860","b8859","b8858","b8857","b8855","b8854","b8853","b8852","b8851","b8850","b8849","b8848","b8847","b8846","b8843","b8842","b8841","b8840","b8839","b8838","b8837","b8836","b8833","b8832","b8831","b8830","b8829","b8828","b8827","b8826","b8825","b8824","b8823","b8822","b8821","b8816","b8815","b8814","b8813","b8811","b8809","b8808","b8807","b8806","b8804","b8802","b8799","b8798","b8797","b8796","b8795","b8794","b8793","b8792","b8791","b8790","b8789","b8788","b8787","b8786","b8785","b8784","b8783","b8781","b8779","b8778","b8777","b8776","b8775","b8772","b8771","b8770","b8769","b8766","b8763","b8762","b8761","b8760","b8759","b8757","b8756","b8755","b8754","b8753","b8752","b8751","b8750","b8749","b8748","b8747","b8746","b8744","b8742","b8741","b8740","b8739","b8738","b8737","b8734","b8733","b8732","b8731","b8730","b8729","b8728","b8726","b8724","b8722","b8721","b8720","b8703","b8719","b8718","b8717","b8715","b8714","b8713","b8712","b8711","b8710","b8709","b8708","b8705","b8702","b8701","b8699","b8698","b8697","b8696","b8694","b8693","b8692","b8691","b8690","b8688","b8685","b8684","b8683","b8682","b8681","b8680","b8679","b8678","b8676","b8672","b8671","b8670","b8668","b8667","b8665","b8664","b8663","b8662","b8661","b8660","b8658","b8657","b8656","b8653","b8651","b8648","b8646","b8645","b8644","b8643","b8642","b8641","b8640","b8639","b8638","b8637","b8635","b8634","b8631","b8629","b8628","b8626","b8625","b8624","b8611","b8610","b8609","b8608","b8607","b8606","b8605","b8604","b8603","b8602","b8601","b8600","b8599","b8598","b8595","b8591","b8590","b8589","b8587","b8586","b8585","b8583","b8581","b8580","b8579","b8578","b8576","b8575","b8574","b8573","b8571","b8570","b8569","b8565","b8563","b8562","b8560","b8559","b8558","b8557","b8555","b8554","b8553","b8552","b8551","b8550","b8548","b8547","b8546","b8545","b8533","b8532","b8531","b8530","b8529","b8528","b8526","b8525","b8522","b8519","b8517","b8514","b8513","b8508","b8507","b8506","b8505","b8502","b8501","b8500","b8498","b8497","b8496","b8495","b8493","b8492","b8487","b8485","b8480","b8479","b8478","b8477","b8476","b8475","b8474","b8473","b8472","b8471","b8470","b8469","b8468","b8467","b8466","b8464","b8461","b8460","b8459","b8457","b8445","b8429","b8425","b8424","b8423","b8422","b8420","b8419","b8418","b8417","b8416","b8413","b8412","b8411","b8407","b8405","b8401","b8400","b8399","b8398","b8394","b8393","b8392","b8391","b8390","b8389","b8388","b8377","b8373","b8372","b8370","b8369","b8368","b8366","b8364","b8363","b8362","b8361","b8360","b8358","b8356","b8355","b8354","b8353","b8352","b8351","b8350","b8348","b8347","b8340","b8339","b8338","b8337","b8336","b8334","b8333","b8332","b8331","b8330","b8329","b8328","b8327","b8325","b8323","b8322","b8320","b8318","b8317","b8315","b8312","b8310","b8309","b8308","b8305","b8304","b8303","b8301","b8300","b8299","b8298","b8297","b8295","b8292","b8291","b8287","b8286","b8285","b8284","b8281","b8280","b8279","b8278","b8277","b8276","b8272","b8271","b8270","b8269","b8268","b8267","b8266","b8265","b8264","b8263","b8262","b8261","b8260","b8259","b8258","b8256","b8255","b8254","b8253","b8252","b8250","b8249","b8248","b8247","b8246","b8245","b8244","b8243","b8242","b8241","b8240","b8239","b8238","b8236","b8235","b8234","b8233","b8232","b8231","b8230","b8229","b8227","b8226","b8225","b8224","b8223","b8222","b8221","b8220","b8219","b8218","b8216","b8215","b8214","b8213","b8212","b8210","b8209","b8208","b8204","b8203","b8202","b8201","b8200","b8198","b8197","b8196","b8195","b8194","b8193","b8192","b8191","b8190","b8189","b8188","b8187","b8185","b8184","b8183","b8182","b8181","b8180","b8179","b8178","b8177","b8175","gguf-v0.18.0","b8173","b8172","b8171","b8170","b8169","b8168","b8167","b8166","b8165","b8164","b8163","b8162","b8161","b8159","b8157","b8156","b8155","b8153","b8152","b8149","b8148","b8147","b8146","b8145","b8144","b8143","b8142","b8141","b8140","b8138","b8133","b8132","b8131","b8130","b8128","b8126","b8124","b8123","b8122","b8121","b8119","b8118","b8117","b8116","b8115","b8113","b8112","b8111","b8110","b8109","b8108","b8107","b8106","b8105","b8104","b8102","b8101","b8100","b8099","b8098","b8096","b8095","b8094","b8093","b8091","b8089","b8088","b8087","b8086","b8083","b8082","b8079","b8078","b8077","b8076","b8075","b8074","b8073","b8072","b8071","b8070","b8069","b8068","b8067","b8064","b8062","b8061","b8060","b8059","b8058","b8057","b8056","b8055","b8054","b8053","b8052","b8051","b8049","b8048","b8047","b8046","b8043","b8042","b8041","b8040","b8038","b8037","b8036","b8035","b8034","b8033","b8032","b8030","b8028","b8027","b8026","b8025","b8024","b8023","b8022","b8021","b8020","b8018","b8017","b8012","b8011","b8008","b8007","b8006","b8005","b8004","b8003","b8001","b7999","b7998","b7997","b7996","b7995","b7994","b7993","b7992","b7991","b7990","b7989","b7988","b7987","b7984","b7983","b7982","b7981","b7976","b7974","b7973","b7972","b7971","b7970","b7969","b7968","b7966","b7965","b7964","b7962","b7961","b7960","b7959","b7958","b7957","b7956","b7955","b7954","b7952","b7951","b7950","b7946","b7947","b7945","b7944","b7943","b7942","b7941","b7940","b7938","b7936","b7935","b7933","b7932","b7931","b7930","b7929","b7928","b7927","b7926","b7925","b7924","b7923","b7922","b7921","b7920","b7919","b7918","b7917","b7913","b7911","b7910","b7909","b7907","b7905","b7904","b7903","b7902","b7899","b7898","b7895","b7897","b7896","b7885","b7883","b7881","b7880","b7879","b7876","b7875","b7872","b7871","b7870","b7869","b7868","b7867","b7865","b7864","b7862","b7861","b7860","b7858","b7857","b7856","b7855","b7853","b7852","b7851","b7850","b7849","b7847","b7845","b7844","b7843","b7842","b7841","b7839","b7837","b7836","b7835","b7833","b7832","b7830","b7828","b7827","b7826","b7825","b7824","b7823","b7822","b7821","b7820","b7819","b7818","b7815","b7814","b7813","b7812","b7811","b7809","b7808","b7807","b7806","b7805","b7804","b7802","b7801","b7798","b7795","b7794","b7793","b7792","b7791","b7790","b7789","b7788","b7787","b7786","b7785","b7784","b7783","b7782","b7781","b7779","b7777","b7775","b7774","b7772","b7770","b7769","b7768","b7767","b7766","b7765","b7762","b7761","b7760","b7758","b7757","b7756","b7755","b7754","b7753","b7752","b7751","b7750","b7749","b7748","b7747","b7746","b7745","b7744","b7743","b7742","b7741","b7740","b7739","b7738","b7737","b7736","b7735","b7731","b7730","b7729","b7728","b7727","b7726","b7725","b7723","b7721","b7720","b7719","b7718","b7717","b7716","b7714","b7713","b7712","b7710","b7709","b7708","b7707","b7705","b7704","b7703","b7700","b7699","b7698","b7697","b7694","b7692","b7691","b7690","b7689","b7688","b7687","b7685","b7684","b7682","b7681","b7680","b7679","b7678","b7677","b7676","b7675","b7673","b7672","b7668","b7667","b7666","b7664","b7662","b7658","b7657","b7656","b7655","b7654","b7653","b7652","b7651","b7650","b7649","b7648","b7647","b7646","b7645","b7644","b7642","b7641","b7640","b7639","b7638","b7636","b7635","b7634","b7633","b7632","b7631","b7630","b7628","b7626","b7625","b7624","b7623","b7622","b7621","b7620","b7619","b7618","b7617","b7616","b7615","b7614","b7613","b7612","b7611","b7610","b7609","b7608","b7607","b7605","b7603","b7601","b7600","b7599","b7598","b7595","b7593","b7592","b7591","b7590","b7589","b7588","b7585","b7583","b7582","b7581","b7580","b7579","b7577","b7574","b7572","b7571","b7569","b7568","b7567","b7566","b7565","b7564","b7563","b7562","b7561","b7560","b7558","b7557","b7556","b7555","b7554","b7553","b7552","b7551","b7550","b7549","b7548","b7547","b7545","b7544","b7543","b7542","b7541","b7540","b7539","b7538","b7536","b7531","b7530","b7529","b7527","b7526","b7525","b7524","b7522","b7520","b7519","b7516","b7515","b7513","b7512","b7511","b7510","b7509","b7508","b7501","b7507","b7506","b7503","b7502","b7499","b7498","b7497","b7496","b7495","b7493","b7492"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-43631.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}