CVE-2026-43622 ggml-org CVE debrief

Who should care

Developers and administrators using llama.cpp builds b1886 through b7445, especially those integrating LLaMA-Android JNI wrapper, should be aware of this vulnerability and take necessary defensive actions. Affected operators include those responsible for vulnerability management, platform security, and asset inventory. Security teams should prioritize defensive actions due to the HIGH CVSS score of 8.5 and potential for denial of service or arbitrary code execution.

Technical summary

The CVE-2026-43622 vulnerability is a double free issue in the LLaMA-Android JNI wrapper of llama.cpp builds b1886 through b7445. Memory allocated using malloc() is deallocated using the C++ delete operator, leading to heap metadata corruption. This can cause denial of service through process crashes or potentially allow for arbitrary code execution depending on the allocator state. Affected product context includes developers and administrators using llama.cpp builds b1886 through b7445, especially those integrating LLaMA-Android JNI wrapper.

Defensive priority

High-priority defensive actions are required due to the HIGH CVSS score of 8.5 and potential for denial of service or arbitrary code execution.

Recommended defensive actions

• Inventory and triage of affected systems and software versions
• Application of vendor patches or updates when available
• Implementation of compensating controls such as monitoring and exception tracking
• Retest and verify vulnerability remediation
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed

Evidence notes

The evidence from the NVD and source item indicates a double free vulnerability in llama.cpp builds b1886 through b7445. The vulnerability is in the LLaMA-Android JNI wrapper, where memory is allocated using malloc() and deallocated using the C++ delete operator, causing heap metadata corruption. Defenders should verify affected product deployments, review official advisories, and plan vendor-supported updates or mitigations.

Official resources