Threats Tagged 'cve-2026-43630'

An out-of-bounds read vulnerability exists in llama.cpp builds b5702 through b7653 in the recurrent memory state restore path. This flaw allows attackers with write access to the slot save directory to craft malicious slot files that trigger reading beyond allocated memory, leaking heap data including pointer values. The vulnerability can expose sensitive memory contents in server logs, undermining ASLR protections and potentially aiding further exploitation. The CVSS 4.0 base score is 6.3, indicating medium severity. No official patch or remediation guidance is currently available.