llama-server (KV cache state restore): Heap buffer overflow in `state_read_data`

CVE-2026-43629AI/ML frameworks & servingcurated

Impact

Heap buffer overflow in state_read_data

Who can reach it

Attacker-supplied KV/session state file restored by the server

What to do

Rebuild; session-state restore is an untrusted-input parser

References

https://nvd.nist.gov/vuln/detail/CVE-2026-43629

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.