CVE-2026-70638: llama.cpp from b1886 (inclusive), through b7445 (inclusive), b1886 through b7445, 0.9.0 through 0.17.1

Affected technology

llama.cpp · from b1886 (inclusive), through b7445 (inclusive)
ggml

llama.cpp · b1886 through b7445, 0.9.0 through 0.17.1
ggml-org

Description’s affected range: through b7445

Component: Not specified by the source
Function: multiplies

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can exploit this by providing a crafted n_seq_max value through a malicious model file or JNI call to trigger heap corruption and achieve denial of service or arbitrary code execution on Android applications using the LLaMA-Android binding. Vendor/CNA’s CVSS 4.0 assessment (base score 8.5/10) rates confidentiality, integrity and availability impact as high.