EUVD-2026-54096

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...

CVE-2026-43622 llama.cpp b1886–b7445 Double Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...

CVE-2026-43622

CVE-2026-43622 affects llama.cpp builds b1886–b7445, where the LLaMA-Android JNI wrapper presents a double free vulnerability. The code allocates memory with malloc() in new_1batch() but frees it with the C++ delete operator in free_1batch(), leading to heap metadata corruption. Consequences desc...

CVE-2026-43622 llama.cpp b1886–b7445 Double Free via llama-android.cpp

llama.cpp builds b1886 through b7445 contain a double free vulnerability in the LLaMA-Android JNI wrapper where new1batch allocates memory using malloc while free1batch deallocates it using the C++ delete operator, causing heap metadata corruption. Attackers can trigger this memory management...

Exploit for CVE-2026-0163

CVE-2026-0163 DISCLAIMER This repository is for educati...

columba v2.1.0-beta

Columba Columba is a simple messaging and voice app for the Reticulum network on Android. Send LXMF messages and make LXST voice calls without relying on the internet, cell towers, or any central servers. Built with a native Android interface and Material Design 3, Columba brings mesh networking ...

EUVD-2025-210623

SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Control. An authenticated attacker can manipulate user identifier parameters to bypass authorization controls and gain unauthorized READ and WRITE access to other users' personal information. The API fails to validate that the...

PT-2026-68795

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description A race condition leads to a use-after-free issue in the LLaMA-Android JNI wrapper. This occurs because the functions bench 1model and free 1context lack proper synchronization, enabling one...

CVE-2026-70639: NULL Pointer Dereference

llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench1model function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger ...

CVE-2026-19170: Use After Free

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-70638: Integer Overflow or Wraparound

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new1batch function multiplies sizeofllamaseqid by an attacker-controlled nseqmax parameter without overflow validation, causing heap buffer allocation to wrap and allocate...

CVE-2026-19137: Use After Free

Use after free in WebGL in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-68682

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description A use after free issue exists in WebGL. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker...

PT-2026-68794

Name of the Vulnerable Software and Affected Versions llama.cpp builds b1886 through b7445 Description A null pointer dereference occurs in the LLaMA-Android JNI wrapper. The bench 1model function does not validate the model context pointer before dereferencing it. An attacker can provide a...

PT-2026-68793

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description An integer overflow exists in the LLaMA-Android JNI wrapper. The new 1batch function multiplies the size of llama seq id by the n seq max parameter without validating for overflows. This can...

CVE-2026-19157: Out-of-bounds Write

Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-68618

Name of the Vulnerable Software and Affected Versions llama.cpp versions b1886 through b7445 Description A double free issue exists in the LLaMA-Android JNI wrapper. The new 1batch function allocates memory using malloc, but the free 1batch function deallocates it using the C++ delete operator...

CVE-2026-19143: Improper Input Validation

Insufficient validation of untrusted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 allowed a local attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

PT-2026-68688

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description Insufficient validation of untrusted input in WebAPKs allows a local attacker to potentially perform a sandbox escape via a malicious file. A sandbox escape is a security...

PT-2026-68691

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 151.0.7922.109 Description An uninitialized use in the GPU component allows a remote attacker who has already compromised the renderer process to retrieve potentially sensitive information from proces...