CVE-2026-43622: llama.cpp b1886–b7445 Double Free via llama-android.cpp
llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch() allocates memory using malloc() while free1batch() deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management mismatch to cause denial of service through process crashes or potentially achieve arbitrary code execution depending on allocator state.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43622?
CVE-2026-43622 has a high severity rating of 7.8.
What type of vulnerability is CVE-2026-43622?
CVE-2026-43622 is classified as a Double Free vulnerability.
How can I fix CVE-2026-43622?
To fix CVE-2026-43622, you should update to the latest version of llama.cpp released after b7445 which addresses this issue.
What causes the double free issue in CVE-2026-43622?
The double free issue in CVE-2026-43622 is caused by the mismatch of memory allocation and deallocation methods in the LLaMA-Android JNI wrapper.
What are the potential impacts of CVE-2026-43622?
Exploitation of CVE-2026-43622 can lead to heap metadata corruption, which can potentially allow attackers to execute arbitrary code.