PT-2026-64820 · Undefined · Undefined

CVE-2026-17500 · Published 2026-07-27 · Updated 2026-07-27

NVD

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function visit pattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Fix

NULL Pointer Dereference

Improper Resource Release

Weakness Enumeration

CWE-476

CWE-404

Related Identifiers

CVE-2026-17500

Affected Products

Undefined

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-17500 · Security Note
• https://github.com/ggml-org/llama.cpp/pull/25308 · Note
• https://vuldb.com/vuln/383353/cti · Note
• https://github.com/ggml-org/llama.cpp/issues/25284 · Note
• https://vuldb.com/cve/CVE-2026-17500 · Note
• https://github.com/ggml-org/llama.cpp · Note
• https://vuldb.com/submit/798503 · Note
• https://vuldb.com/vuln/383353 · Note