CVE-2026-70639

Received Received - Intake

Null Pointer Dereference in LLaMA-Android JNI Wrapper

Publication date: 2026-08-06

Last updated on: 2026-08-06

Assigner: VulnCheck

Description

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger a null context condition, causing a SIGSEGV crash that terminates the Android application process and results in denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-06

Last Modified

2026-08-06

Generated

2026-08-07

AI Q&A

2026-08-07

EPSS Evaluated

N/A

NVD

CVE-2026-70639

Affected Vendors & Products

Vendor	Product	Version / Range
llama	llama.cpp	From b1886 (inc) to b7445 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-476	The product dereferences a pointer that it expects to be valid but is NULL.

Attack-Flow Graph

Executive Summary

This vulnerability is a null pointer dereference in the LLaMA-Android JNI wrapper of llama.cpp versions b1886 through b7445. The bench_1model() function does not check if the model context pointer is valid before using it, leading to a crash when a malicious or corrupted model file is provided.

Detection Guidance

Detecting this vulnerability requires checking for crashes in Android applications using vulnerable versions of llama.cpp. Monitor for SIGSEGV crashes in logs when processing model files. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to crash the Android application using llama.cpp, causing a denial of service. This would terminate the app process and disrupt its normal operation.

Mitigation Strategies

Update to a version of llama.cpp after b7445 where bench_1model() validates the model context pointer. Avoid using untrusted or corrupt model files until patched.

Hi! I’m here to help you understand CVE-2026-70639. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70