PT-2026-64820 · Ggml Org · Llama.Cpp

M00Dy · CVE-2026-17500 · Publicado 2026-07-27 · Atualizado 2026-07-27

Mitre

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function visit pattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Correção

Improper Resource Release

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-404

CWE-476

Identificadores relacionados

CVE-2026-17500

Produtos afetados

Llama.Cpp

Referências · 8

• https://vuldb.com/vuln/383353 · Nota
• https://github.com/ggml-org/llama.cpp · Nota
• https://vuldb.com/cve/CVE-2026-17500 · Nota
• https://github.com/ggml-org/llama.cpp/issues/25284 · Nota
• https://github.com/ggml-org/llama.cpp/pull/25308 · Correção
• https://vuldb.com/submit/798503 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-17500 · Nota de Segurança
• https://vuldb.com/vuln/383353/cti · Nota