CVE-2026-70639

Mô tả

Tham khảo

• Vladimir-tokarev-cyera/llama-cpp-security-patches · Patch
• ggml-org/llama.cpp commit 5c0d188 · Patch
• ggml-org/llama.cpp release b7446 · Patch
• vulncheck.com/advisories/llama-cpp-b1886-b7445-null-pointer-dereference-dos-via-llama-android-cpp · Third Party Advisory

Lỗ hổng khác của llama.cpp

• CVE-2026-52132CAO 7.5llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_all…
• CVE-2026-52131CAO 7.5llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
• CVE-2026-52130CAO 7.5llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.
• CVE-2026-70640CAO 7.0llama.cpp builds b1886 through b7445 contain a race condition use-after-free vulnerability in the LLaMA-Android JNI wrapper where bench_1mod…
• CVE-2026-70638CAO 7.8llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() funct…