CVE-2026-70640: llama.cpp from b1886 (inclusive), through b7445 (inclusive), b1886 through b7445, 0.9.0 through 0.17.1

Affected technology

llama.cpp · from b1886 (inclusive), through b7445 (inclusive)
ggml

llama.cpp · b1886 through b7445, 0.9.0 through 0.17.1
ggml-org

Description’s affected range: through b7445

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

Attackers can exploit this by performing heap spray with attacker-controlled data containing a fake vtable to hijack the vtable pointer at offset +0x30, causing llama_batch_allocr::clear() to dereference arbitrary memory and achieve remote code execution. Vendor/CNA’s CVSS 4.0 assessment (base score 7.3/10) rates confidentiality, integrity and availability impact as high.