CVE-2026-43622 json
llama.cpp b1886–b7445 Double Free via llama-android.cpp
published 2026-08-06 3 mo ago modified 2026-11-08 20 h ago also EUVD-2026-54096
- cvss
- 7.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.2%
- EPSS 0.2% chance of exploitation in 30 days, percentile 13%
- public exploits
- 0
- none known
Summary
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code execution depending on allocator state.
Patch / fix
- ggerganov llama.cpp b7446
- ggml llama.cpp b7446
- llama.cpp Debian 14 7593+dfsg-1
debian advisories DEBIAN-CVE-2026-43622
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 3 mo ago
Exploit prediction
0.23% chance of exploitation in the next 30 days, higher than 13% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
| CNA | 3.1 | 7.8 | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| CNA | 4.0 | 8.5 | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Affected products
- ggml-org llama.cpp
Classification
References
-
github.com
/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388
patch
-
github.com
/ggml-org/llama.cpp/releases/tag/b7446
release-notes, patch, vendor-advisory
-
github.com
/Vladimir-tokarev-cyera/llama-cpp-security-patches
related, patch, third-party-advisory
-
vulncheck.com
/advisories/llama-cpp-b1886-b7445-double-free-via-llama-android-cpp
third-party-advisory, patch
Sources
- CVE List CVE-2026-43622
- NVD CVE-2026-43622
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.