AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2026-70638

HIGH · CVSS 7.8 EPSS 0.13% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The LLaMA-Android JNI wrapper in versions b1886 through b7445 is vulnerable to an integer overflow due to improper validation of the n_seq_max parameter in the new_1batch() function, leading to potential heap buffer corruption. This flaw allows attackers to exploit the vulnerability via malicious model files or JNI calls, resulting in denial of service or arbitrary code execution in affected Android applications. Android developers and security teams should prioritize addressing this vulnerability to mitigate risks associated with potential exploitation.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit arbitrary code execution code execution

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-70638
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Android

Original NVD Description

llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validation, causing heap buffer allocation to wrap and allocate insufficient memory. Attackers can exploit this by providing a crafted n_seq_max value through a malicious model file or JNI call to trigger heap corruption and achieve denial of service or arbitrary code execution on Android applications using the LLaMA-Android binding.