llama.cpp b1886–b7445 Null Pointer Dereference DoS via llama-android.cpp (CVE-2026-70639) | HOL Guard CVE