CVE-2026-43632

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-43632
llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/count_tokens) that bypass the task queue and access ctx_server.vocab directly on HTTP worker threads. Attackers can exploit a time-of-check-time-of-use race condition where the main thread destroys and frees vocab after the synchronization lock is released but before the handler finishes using it, causing a crash or potential code execution when --sleep-idle-seconds is configured.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches Patch Third Party Advisory
https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-in-tokenization-endpoints Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*
History

23 Oct 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) Las compilaciones de llama.cpp desde la b7492 hasta la última b9060 contienen una vulnerabilidad de uso después de liberación en llama-server que afecta a seis puntos finales de tokenización (/tokenize, /detokenize, /infill, /apply-template, /rerank, y /anthropic/count_tokens) que omiten la cola de tareas y acceden directamente a ctx_server.vocab en los hilos de trabajo HTTP. Los atacantes pueden explotar una condición de carrera de tiempo de verificación-tiempo de uso donde el hilo principal destruye y libera vocab después de que se libera el bloqueo de sincronización pero antes de que el gestor termine de usarlo, causando un fallo o una posible ejecución de código cuando se configura --sleep-idle-seconds.

21 Sep 2026, 18:11

Type Values Removed Values Added
References () https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches - () https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches - Patch, Third Party Advisory
References () https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-in-tokenization-endpoints - () https://www.vulncheck.com/advisories/llama-cpp-b7492-b9060-use-after-free-in-tokenization-endpoints - Patch, Third Party Advisory
First Time Ggml
Ggml llama.cpp
CPE cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*
Information

Published : 2026-08-06 22:17

Updated : 2026-10-23 21:10

NVD link : CVE-2026-43632

Mitre link : CVE-2026-43632

CVE.ORG link : CVE-2026-43632

JSON object : View

Products Affected

ggml

  • llama.cpp
CWE
CWE-367

Time-of-check Time-of-use (TOCTOU) Race Condition

CWE-416

Use After Free