EUVD-2026-54283

llama.cpp builds b3978 through b9058 contain an integer underflow and out-of-bounds read vulnerability in the DRY sampler that allows unauthenticated attackers to trigger a heap buffer underflow by sending a crafted HTTP request with dryallowedlength set to INT32MIN to the /v1/completions or...

CVE-2026-43628

llama.cpp builds b3978–b9058 are affected by an integer underflow and out-of-bounds read in the DRY sampler. A crafted HTTP request with dry_allowed_length = INT32_MIN to /v1/completions or /v1/chat/completions can trigger a heap buffer underflow, enabling unauthenticated attackers to crash the s...