CVE-2026-43622

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445

Description A double free issue exists in the LLaMA-Android JNI wrapper. The new 1batch() function allocates memory using malloc(), but the free 1batch() function deallocates it using the C++ delete operator. This memory management mismatch leads to heap metadata corruption, which can be triggered by attackers to cause a denial of service via process crashes or potentially enable arbitrary code execution.

Recommendations Update llama.cpp to a version later than b7445.