{"id":"CVE-2026-39909","aliases":["DEBIAN-CVE-2026-39909","EUVD-2026-64001","GHSA-fpvp-jgx3-4w9q"],"status":"rejected","title":"llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's...","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","severity":{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2026-08-21T16:28:26Z","modified":"2026-10-16T14:10:00Z","fixes":[{"ecosystem":"Debian:14","package":"llama.cpp","fixed_in":["8611+dfsg-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:14","package":"llama.cpp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8611+dfsg-1"}]}],"versions":["5151+dfsg-1~exp2","5151+dfsg-1~exp3","5318+dfsg-1","5318+dfsg-2","5713+dfsg-1","5760+dfsg-1","5760+dfsg-2","5760+dfsg-3","5760+dfsg-4","5882+dfsg-1","5882+dfsg-2","5882+dfsg-3","5882+dfsg-3~exp1","5882+dfsg-3~exp2","5882+dfsg-3~exp3","5882+dfsg-4","6641+dfsg-1","6641+dfsg-2","6641+dfsg-3","7593+dfsg-1","7593+dfsg-2","7593+dfsg-3","7965+dfsg-1","8064+dfsg-1","8064+dfsg-2","8461+dfsg-1"]}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-39909","tags":["advisory"]},{"url":"https://github.com/ggml-org/llama.cpp/pull/21175","tags":["report"]},{"url":"https://github.com/ggml-org/llama.cpp/commit/389c7d4955ba55c7418afaebf7c23d9ed64ef707","tags":["fix"]},{"url":"https://github.com/ggml-org/llama.cpp/releases/tag/b8585","tags":["advisory"]},{"url":"https://www.vulncheck.com/advisories/llama-cpp-use-after-free-in-rpc-graph-recompute-handler","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-fpvp-jgx3-4w9q"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/39xxx/CVE-2026-39909.json","tags":["advisory"]},{"url":"https://github.com/ggml-org/llama.cpp","tags":["package"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-39909","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-39909","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","status":"rejected","published":"2026-08-21T16:28:26.774Z","modified":"2026-09-02T21:26:27.029Z","updated_at":"2026-11-02T14:20:02.662847Z"}],"euvd":[{"id":"EUVD-2026-64001","description":"This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","status":"published","published":"2026-08-21T16:28:26Z","modified":"2026-09-02T21:26:27Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T18:01:14.689075Z"}],"ghsa":[{"id":"GHSA-fpvp-jgx3-4w9q","title":"llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's...","description":"llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with attacker-controlled content. Attackers can send RPC requests to trigger re-execution of stored graphs with dangling pointers, enabling full remote code execution without requiring authentication or user interaction.","status":"published","published":"2026-08-21T18:34:57Z","modified":"2026-08-21T18:35:07Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:10:50.012908Z"}],"nvd":[{"id":"CVE-2026-39909","description":"Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.","status":"rejected","published":"2026-08-21T17:16:30.81Z","modified":"2026-10-16T14:10:00.12Z","updated_at":"2026-11-02T14:12:40.665005Z"}],"osv":[{"id":"CVE-2026-39909","title":"llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler","description":"llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with attacker-controlled content. Attackers can send RPC requests to trigger re-execution of stored graphs with dangling pointers, enabling full remote code execution without requiring authentication or user interaction.","status":"published","published":"2026-08-21T16:28:26.774Z","modified":"2026-08-27T19:00:31.094091Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:45:03.040464Z"},{"id":"DEBIAN-CVE-2026-39909","status":"published","published":"2026-08-21T17:16:30.81Z","modified":"2026-09-03T05:00:09.488606894Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:45:54.892385Z"}]}}