Skip to content
Heist/ feed
UnratedFix available

DEBIAN-CVE-2026-34159

Type: advisorySource: OSV1 source record

llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPH_COMPUTE messages. Combined with pointer leaks from ALLOC_BUFFER/BUFFER_GET_BASE, this gives full ASLR bypass and remote code execution. No authentication required, just TCP access to the RPC server port. This issue has been patched in version b8492.

Announced Source revision 1
Original source ↗

DEBIAN-CVE-2026-34159

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: osv:DEBIAN-CVE-2026-34159

llama.cpp

Source reference: /affected/0/package/name

Affected versions
5151+dfsg-1~exp2

Source reference: /affected/0/versions

5151+dfsg-1~exp3

Source reference: /affected/0/versions

5318+dfsg-1

Source reference: /affected/0/versions

5318+dfsg-2

Source reference: /affected/0/versions

5713+dfsg-1

Source reference: /affected/0/versions

5760+dfsg-1

Source reference: /affected/0/versions

5760+dfsg-2

Source reference: /affected/0/versions

5760+dfsg-3

Source reference: /affected/0/versions

5760+dfsg-4

Source reference: /affected/0/versions

5882+dfsg-1

Source reference: /affected/0/versions

5882+dfsg-2

Source reference: /affected/0/versions

5882+dfsg-3

Source reference: /affected/0/versions

5882+dfsg-3~exp1

Source reference: /affected/0/versions

5882+dfsg-3~exp2

Source reference: /affected/0/versions

5882+dfsg-3~exp3

Source reference: /affected/0/versions

5882+dfsg-4

Source reference: /affected/0/versions

6641+dfsg-1

Source reference: /affected/0/versions

6641+dfsg-2

Source reference: /affected/0/versions

6641+dfsg-3

Source reference: /affected/0/versions

7593+dfsg-1

Source reference: /affected/0/versions

7593+dfsg-2

Source reference: /affected/0/versions

7593+dfsg-3

Source reference: /affected/0/versions

7965+dfsg-1

Source reference: /affected/0/versions

8064+dfsg-1

Source reference: /affected/0/versions

8064+dfsg-2

Source reference: /affected/0/versions

8461+dfsg-1

Source reference: /affected/0/versions

Fixed versions
8611+dfsg-1

Source reference: /affected/0/ranges

Prerequisites
Not stated in this record

Structured affected-version data

Original package identities and version rules from this source.

[
  {
    "ranges": [
      {
        "type": "ECOSYSTEM",
        "events": [
          {
            "introduced": "0"
          },
          {
            "fixed": "8611+dfsg-1"
          }
        ]
      }
    ],
    "package": {
      "name": "llama.cpp",
      "purl": "pkg:deb/debian/llama.cpp?arch=source&distro=forky",
      "ecosystem": "Debian:14"
    },
    "versions": [
      "5151+dfsg-1~exp2",
      "5151+dfsg-1~exp3",
      "5318+dfsg-1",
      "5318+dfsg-2",
      "5713+dfsg-1",
      "5760+dfsg-1",
      "5760+dfsg-2",
      "5760+dfsg-3",
      "5760+dfsg-4",
      "5882+dfsg-1",
      "5882+dfsg-2",
      "5882+dfsg-3",
      "5882+dfsg-3~exp1",
      "5882+dfsg-3~exp2",
      "5882+dfsg-3~exp3",
      "5882+dfsg-4",
      "6641+dfsg-1",
      "6641+dfsg-2",
      "6641+dfsg-3",
      "7593+dfsg-1",
      "7593+dfsg-2",
      "7593+dfsg-3",
      "7965+dfsg-1",
      "8064+dfsg-1",
      "8064+dfsg-2",
      "8461+dfsg-1"
    ],
    "database_specific": {
      "source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-34159.json"
    },
    "ecosystem_specific": {
      "urgency": "not yet assigned"
    }
  }
]

Publisher severity

No explicit severity was provided.

Event
#55952 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement