CVE-2026-70639

概要

参考情報

• Vladimir-tokarev-cyera/llama-cpp-security-patches · Patch
• ggml-org/llama.cpp commit 5c0d188 · Patch
• ggml-org/llama.cpp release b7446 · Patch
• vulncheck.com/advisories/llama-cpp-b1886-b7445-null-pointer-dereference-dos-via-llama-android-cpp · Third Party Advisory

llama.cpp のその他の脆弱性

• CVE-2026-52132高 7.5llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_all…
• CVE-2026-52131高 7.5llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
• CVE-2026-52130高 7.5llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.
• CVE-2026-70640高 7.0llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1mod…
• CVE-2026-70638高 7.8llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() funct…