CVE-2026-43622

High

Description

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates memory using malloc() while free_1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code execution depending on allocator state.

SeverityHigh

CVSS7.8

Exploit probability—

ProductGgml Llama.cpp

PublishedAug 6, 2026

First seenAug 6, 2026

Weakness typeCWE-762CWE-762 CWE-415CWE-415

How to fix

Patches

github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388

Vendor advisories

github.com/ggml-org/llama.cpp/releases/tag/b7446

Affected products

Product	Affected versions	Fixed in
ggml llama.cpp	b1886 ≤ v ≤ b7445	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.