Topic

Cve 2026 118375

Coverage tagged cve 2026 118375.

Articles: 1
Desk: 1

Data graphic: attack chain from an exposed llama.cpp rpc-server port, through a HELLO advertising RDMA and rdma_recv copying up to 256 KiB, into a 1-byte stack variable in rpc_serve_client , ending in a crash or code execution CVE-2026-118375, CVSS 4.0 9.2 .

highAI Security Cve 2026 118375

llama.cpp rpc-server Has Two Unauthenticated Flaws: A Stack Overflow Over RDMA and a One-Packet Crash

CVE-2026-118375 lets a peer advertising RDMA write 256 KiB into a 1-byte stack variable; CVE-2026-119052 aborts the server. Update every node to b11935 and keep the RPC port off open networks.

Nov 8 · 4 min