CVE-2026-17500

Publié : 27 juillet 2026

Modifié : 27 juillet 2026

Score CVSS

5.3

MEDIUM

Description détaillée

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Références et Patchs

https://github.com/ggml-org/llama.cpp/https://github.com/ggml-org/llama.cpp/issues/25284 https://github.com/ggml-org/llama.cpp/pull/25308 https://vuldb.com/cve/CVE-2026-17500 https://vuldb.com/submit/798503 https://vuldb.com/vuln/383353 https://vuldb.com/vuln/383353/cti

Dernières Vulnérabilités

CVE-2026-15928

XMLRPC-C Library versions 1.07 through 1.67.01 are vulnerable to a reflected cross-site scripting (XSS) vulnerability in the error page component.

VOIR DÉTAILS

CVE-2026-17501

A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes allocation of resources. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

VOIR DÉTAILS

CVE-2026-57990

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

VOIR DÉTAILS