llama.cpp versions b5702 through b7653 contain an out-of-bounds read vulnerability (CWE-125) in the recurrent memory state restore path. Attackers who have write access to the slot save directory can create a malicious slot file with an oversized seq_id value that triggers reading beyond the allocated cells array. This results in leakage of heap memory data, including pointer values, into server logs. Such leakage can defeat Address Space Layout Randomization (ASLR) protections and facilitate further exploitation. The vulnerability is tracked as CVE-2026-43630 with a CVSS 4.0 score of 6.3 (medium severity). There is no vendor advisory or patch currently available, and no known exploits in the wild have been reported.

The vulnerability allows an attacker with write access to the slot save directory to read memory beyond allocated bounds, leaking sensitive heap data including pointer values. This memory disclosure can undermine ASLR protections, increasing the risk of further exploitation. However, exploitation requires write access to the slot save directory, limiting the attack surface. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write access to the slot save directory to trusted users only to prevent attackers from crafting malicious slot files that trigger the vulnerability.