{"id":"UBUNTU-CVE-2026-34159","details":"llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPH_COMPUTE messages. Combined with pointer leaks from ALLOC_BUFFER/BUFFER_GET_BASE, this gives full ASLR bypass and remote code execution. No authentication required, just TCP access to the RPC server port. This issue has been patched in version b8492.","modified":"2026-05-14T14:40:28.913928Z","published":"2026-04-01T18:16:00Z","upstream":["CVE-2026-34159"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-34159"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-34159"},{"type":"REPORT","url":"https://github.com/ggml-org/llama.cpp/security/advisories/GHSA-j8rj-fmpv-wcxw"},{"type":"REPORT","url":"https://github.com/ggml-org/llama.cpp/pull/20908"}],"affected":[{"package":{"name":"llama.cpp","ecosystem":"Ubuntu:25.10","purl":"pkg:deb/ubuntu/llama.cpp@5882+dfsg-2?arch=source&distro=questing"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5318+dfsg-1","5318+dfsg-2","5713+dfsg-1","5760+dfsg-1","5760+dfsg-3","5760+dfsg-4","5882+dfsg-2"],"ecosystem_specific":{"binaries":[{"binary_name":"llama.cpp","binary_version":"5882+dfsg-2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-34159.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},{"type":"Ubuntu","score":"medium"}]}