8.1Hoch
CVE-2026-107183llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser
Beschreibung
llama.cpp before b11393 contains a use-after-free and double free vulnerability in common_chat_peg_mapper::map that allows unauthenticated remote attackers to corrupt heap memory via a dangling current_tool pointer. Attackers can submit a chat_parser in a POST /completion request emitting a tool-id after a tool-close tag to crash llama-server and shape a heap write primitive.
Schwachstellentyp (CWE):
CWE-416
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
- https://github.com/ggml-org/llama.cpp/pull/29942 patchissue-tracking
- Patch Commit patch
- Dangling current_tool in common_chat_peg_mapper::map technical-description
- chat_parser accepted from request body technical-description
- https://github.com/ggml-org/llama.cpp product
- VulnCheck Advisory: llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser third-party-advisory