CVE-2026-87768

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

CVE-2026-87768 DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

CVE-2026-87768 DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

EUVD-2026-113902

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

CVE-2026-87768

The DateTime::Lite Perl module (versions before 0.8.1 ) is vulnerable to CPU exhaustion due to inefficient algorithmic complexity (CWE-407 ). The root cause lies in the _normalize_leap_seconds function, which processes day boundaries one day at a time. When using add(seconds => $n) on an objec...

PT-2026-133517

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalize leap seconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The X...

CVE-2026-87768: Inefficient Algorithmic Complexity

DateTime::Lite versions before 0.8.1 for Perl allow CPU exhaustion via a per-day loop when adding seconds. normalizeleapseconds crosses day boundaries one day at a time, so addseconds = $n on an object with a non-floating time zone takes about |$n|/86400 iterations, and nothing limits $n. The XS...

CVE-2026-43631

A flaw was found in llama.cpp. This use-after-free vulnerability in the llama-server component, specifically within the vocab pointer when the --sleep-idle-seconds feature is enabled, allows unauthenticated remote attackers to execute arbitrary code. Attackers can exploit this by sending requests...

SUSE CVE-2026-43632

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints /tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/counttokens that bypass the task queue and access ctxserver.vocab directly on HTTP...

EUVD-2026-54287

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints /tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/counttokens that bypass the task queue and access ctxserver.vocab directly on HTTP...

EUVD-2026-54286

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

DEBIAN-CVE-2026-43632

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints /tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/counttokens that bypass the task queue and access ctxserver.vocab directly on HTTP...

DEBIAN-CVE-2026-43631

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

UBUNTU-CVE-2026-43632

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints /tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/counttokens that bypass the task queue and access ctxserver.vocab directly on HTTP...

CVE-2026-43631

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

CVE-2026-43632

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints /tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/counttokens that bypass the task queue and access ctxserver.vocab directly on HTTP...

CVE-2026-43631

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

CVE-2026-43631 llama.cpp b7492–b9060 Use-After-Free RCE via llama-server

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

CVE-2026-43631: Use After Free

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer of llama-server when the --sleep-idle-seconds feature is enabled, allowing unauthenticated remote attackers to execute arbitrary code. Attackers can trigger the vulnerability by sending...

PT-2026-68730

Name of the Vulnerable Software and Affected Versions llama.cpp versions b7492 through b9060 Description A use-after-free issue exists in the llama-server when the --sleep-idle-seconds feature is enabled. This occurs when the server transitions to sleep mode, causing concurrent worker threads to...