{
 "id": "AIR-2026-0065",
 "slug": "cve-2026-43629-heap-buffer-overflow-in-llama-cpp-kv-cache-st",
 "title": "CVE-2026-43629: Heap buffer overflow in llama.cpp KV cache state restore",
 "summary": "Llama.cpp contains a heap buffer overflow vulnerability in the KV cache state restore path due to missing overflow checks. Attackers with write access to the save path can corrupt memory or achieve code execution.",
 "type": "attack_on_ai",
 "categories": [
  "infra_vuln"
 ],
 "severity": 2,
 "targets": [
  "framework_or_tooling"
 ],
 "products": [
  "llama.cpp"
 ],
 "incident_date": "2026-08-06",
 "incident_date_precision": "day",
 "first_reported": "2026-08-06",
 "sources": [
  {
   "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43629",
   "publisher": "NVD",
   "title": "CVE-2026-43629: llama.cpp builds b4882 through b9058 contain a heap buffer overflow vulnerability in the KV cache state restore path where the…",
   "published_at": "2026-08-06"
  }
 ],
 "source_count": 1,
 "confidence": 0.95,
 "status": "published",
 "origin": "seed_nvd",
 "tags": [
  "CVE-2026-43629",
  "heap-buffer-overflow",
  "llama.cpp"
 ],
 "created_at": "2026-10-18T06:33:31.967Z",
 "updated_at": "2026-10-18T06:33:31.967Z"
}