PT-2026-68795

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description A race condition leads to a use-after-free issue in the LLaMA-Android JNI wrapper. This occurs because the functions bench 1model and free 1context lack proper synchronization, enabling one...

CVE-2026-43622: Mismatched Memory Management Routines

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...

PT-2026-68618

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description A double free issue exists in the LLaMA-Android JNI wrapper. The new 1batch function allocates memory using malloc, but the free 1batch function deallocates it using the C++ delete operator...

CVE-2026-70638: Integer Overflow or Wraparound

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...

CVE-2026-19154: Use After Free

Use after free in Skia in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-70639: NULL Pointer Dereference

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench1model function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger ...

PT-2026-68682

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

PT-2026-68691

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An uninitialized use in the GPU component allows a remote attacker who has already compromised the renderer process to retrieve potentially sensitive information from proces...

Linux Distros Unpatched Vulnerability : CVE-2026-18809

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information disclosure in Firefox for Android and Firefox Focus for Android. This vulnerability was fixed in Firefox 153.0.3. CVE-2026-18809 Note that Nessus...

CVE-2025-49506: Observable Timing Discrepancy

APR-util versions 1.6.3 and earlier function aprpasswordvalidate was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt such as Windows, BeOS, NetWare, or Android. Users are...

PT-2026-68686

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in Resources. This allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a...

CVE-2026-19157: Out-of-bounds Write

Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-19143: Improper Input Validation

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

CVE-2026-19146: Use of Uninitialized Variable

Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

PT-2026-68793

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description An integer overflow exists in the LLaMA-Android JNI wrapper. The new 1batch function multiplies the size of llama seq id by the n seq max parameter without validating for overflows. This can...

CVE-2026-19137: Use After Free

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-68794

Name of the Vulnerable Software and Affected Versions llama.cpp builds b1886 through b7445 Description A null pointer dereference occurs in the LLaMA-Android JNI wrapper. The bench 1model function does not validate the model context pointer before dereferencing it. An attacker can provide a...

PT-2026-68715

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL, which could allow a remote attacker to potentially perform a sandbox escape by inducing the user to visit a crafted HTML page. A use...

PT-2026-68688

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in WebAPKs allows a local attacker to potentially perform a sandbox escape via a malicious file. A sandbox escape is a security...

CVE-2026-19170: Use After Free

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...