Description
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code execution depending on allocator state.
Affected products
ggml: llama.cpp
References4
- github.com/ggml-org/llama.cpp/releases/tag/b7446 PatchRelease NotesVendor Advisory
- github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches PatchThird Party Advisory
- github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b260273… Patch
- www.vulncheck.com/advisories/llama-cpp-b1886-b7445-double-free-… PatchThird Party Advisory
Metrics
- CVSS 3.1
-
7.8
HIGH
Score source: CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 4.0
-
8.5
HIGH
Score source: CNA
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - EPSS — exploit probability
- 0% percentile: 14 · as of 12 November 2026
- CWE
- CWE-415CWE-762
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.