Bug 2514601 - CVE-2026-43627 goose: llama.cpp: Arbitrary Code Execution via Integer Overflow in Memory Allocation [epel-all]
Summary: CVE-2026-43627 goose: llama.cpp: Arbitrary Code Execution via Integer Overflo...
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Fedora EPEL
Classification: Fedora
Component: goose
Version: epel10
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ---
Assignee: RHEL Lightspeed Maint
QA Contact:
URL:
Whiteboard: {"flaws": ["da6b2f07-26af-467a-8b63-c...
Depends On:
Blocks: CVE-2026-43627
TreeView+ depends on / blocked
 
Reported: 2026-08-12 13:27 UTC by Joel Chamberlain
Modified: 2026-09-02 16:45 UTC (History)
4 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2026-09-02 16:45:44 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Joel Chamberlain 2026-08-12 13:27:44 UTC
Disclaimer: Community trackers are created by Red Hat Product Security team on a best effort basis. Package maintainers are required to ascertain if the flaw indeed affects their package, before starting the update process.

llama.cpp builds b1283 through b9058 contain an integer overflow vulnerability in the llama_batch_init() function where unchecked multiplications in malloc() calls can wrap past INT32_MAX when computing allocation sizes. Attackers can pass specially crafted parameters to trigger integer overflow, causing heap corruption and potentially achieving arbitrary code execution through subsequent batch operations that write past allocated buffer boundaries.

Comment 1 Rodolfo Olivieri 2026-09-02 16:45:44 UTC
Goose does not use llama.cpp anywhere in the code. It is only available in the vendor tarball, but because `cargo vendor-filterer` can't handle filtering it out completely and turning it into a stub. 

The code itself does not have any mention or use of llama.cpp. 

```
rolivier@rolivier-thinkpadp16vgen1 ~/W/@/g/goose-1.45.0 (main)> rpm -qi goose
Name        : goose
Version     : 1.38.0
Release     : 1.fc44
Architecture: x86_64
Install Date: Tue 07 Jul 2026 08:21:02 AM -03
Group       : Unspecified
Size        : 208861309
License     : (0BSD OR Apache-2.0 OR MIT) AND Apache-2.0 AND (Apache-2.0 AND ISC) AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR CC0-1.0) AND (Apache-2.0 OR Apache-2.0 WITH LLVM-exception OR MIT) AND (Apache-2.0 OR BSD-1-Clause OR MIT) AND (Apache-2.0 OR BSD-2-Clause OR MIT) AND (Apache-2.0 OR BSD-3-Clause) AND (Apache-2.0 OR BSL-1.0) AND (Apache-2.0 OR CC0-1.0 OR MIT-0) AND (Apache-2.0 OR LGPL-2.1-or-later OR MIT) AND (Apache-2.0 OR MIT) AND (Apache-2.0 OR MIT OR Zlib) AND BSD-2-Clause AND BSD-3-Clause AND (BSD-3-Clause AND MIT) AND (BSD-3-Clause OR MIT) AND BSL-1.0 AND ISC AND LGPL-3.0-or-later AND MIT AND (MIT OR Unlicense) AND MIT-0 AND MPL-2.0 AND Unicode-3.0 AND Zlib AND bzip2-1.0.6
Signature   :
              RSA/SHA256, Fri 03 Jul 2026 04:26:14 PM -03, Key ID dbfcf71c6d9f90a6
Source RPM  : goose-1.38.0-1.fc44.src.rpm
Build Date  : Fri 03 Jul 2026 10:49:10 AM -03
Build Host  : buildvm-x86-10.rdu3.fedoraproject.org
Packager    : Fedora Project
Vendor      : Fedora Project
URL         : https://github.com/block/goose
Bug URL     : https://bugz.fedoraproject.org/goose
Summary     : Extensible AI agent client
Description :
Goose is your on-machine AI agent, capable of automating complex development
tasks from start to finish. More than just code suggestions, goose can build
entire projects from scratch, write and execute code, debug failures,
orchestrate workflows, and interact with external APIs - autonomously.

Whether you're prototyping an idea, refining existing code, or managing
intricate engineering pipelines, goose adapts to your workflow and executes
tasks with precision.

Designed for maximum flexibility, goose works with any LLM and supports
multi-model configuration to optimize performance and cost, seamlessly
integrates with MCP servers, and is available as both a desktop app as well as
CLI - making it the ultimate AI assistant for developers who want to move
faster and focus on innovation.

rolivier@rolivier-thinkpadp16vgen1 ~/W/@/g/goose-1.45.0 (main)> strings /usr/bin/goose | grep "llama.cpp"
,'. Expected one of: ollama, local, llama.cpp
  "description": "Local proxy that hot-swaps llama.cpp (and other) inference backends on demand via an OpenAI-compatible API.",

```

The occurrences of llama.cpp above are merely from description of JSON files.


Note You need to log in before you can comment on or make changes to this bug.