DEBIAN-CVE-2026-21869
llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the n_discard parameter is parsed directly from JSON input in the llama.cpp server's completion endpoints without validation to ensure it's non-negative. When a negative value is supplied and the context fills up, llama_memory_seq_rm/add receives a reversed range and negative offset, causing out-of-bounds memory writes in the token evaluation loop. This deterministic memory corruption can crash the process or enable remote code execution (RCE). There is no fix at the time of publication.
DEBIAN-CVE-2026-21869
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:DEBIAN-CVE-2026-21869
llama.cpp
Source reference: /affected/0/package/name
- Affected versions
- 5151+dfsg-1~exp2
Source reference:
/affected/0/versions5151+dfsg-1~exp3Source reference:
/affected/0/versions5318+dfsg-1Source reference:
/affected/0/versions5318+dfsg-2Source reference:
/affected/0/versions5713+dfsg-1Source reference:
/affected/0/versions5760+dfsg-1Source reference:
/affected/0/versions5760+dfsg-2Source reference:
/affected/0/versions5760+dfsg-3Source reference:
/affected/0/versions5760+dfsg-4Source reference:
/affected/0/versions5882+dfsg-1Source reference:
/affected/0/versions5882+dfsg-2Source reference:
/affected/0/versions5882+dfsg-3Source reference:
/affected/0/versions5882+dfsg-3~exp1Source reference:
/affected/0/versions5882+dfsg-3~exp2Source reference:
/affected/0/versions5882+dfsg-3~exp3Source reference:
/affected/0/versions5882+dfsg-4Source reference:
/affected/0/versions6641+dfsg-1Source reference:
/affected/0/versions6641+dfsg-2Source reference:
/affected/0/versions6641+dfsg-3Source reference:
/affected/0/versions - Fixed versions
- 7593+dfsg-1
Source reference:
/affected/0/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "7593+dfsg-1"
}
]
}
],
"package": {
"name": "llama.cpp",
"purl": "pkg:deb/debian/llama.cpp?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"versions": [
"5151+dfsg-1~exp2",
"5151+dfsg-1~exp3",
"5318+dfsg-1",
"5318+dfsg-2",
"5713+dfsg-1",
"5760+dfsg-1",
"5760+dfsg-2",
"5760+dfsg-3",
"5760+dfsg-4",
"5882+dfsg-1",
"5882+dfsg-2",
"5882+dfsg-3",
"5882+dfsg-3~exp1",
"5882+dfsg-3~exp2",
"5882+dfsg-3~exp3",
"5882+dfsg-4",
"6641+dfsg-1",
"6641+dfsg-2",
"6641+dfsg-3"
],
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-21869.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
]Publisher severity
No explicit severity was provided.
- Event
- #57408 · Revision 1
- Added to Heist Feed
- Publisher date