CVE-2026-17500Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-404CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-07-27: 4Technical Details · 2026-07-27: 207-27
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets4 URLs
Full discourse4 posts
  • Israel@f1tym1
    Disclosure

    CVE-2026-17500 and CVE-2026-17501: ggml-org llama․cpp vulnerabilities allow remote exploitation https://ift.tt/LGnjI7u

    Post summary

    The text announces that CVE-2026-17500 and CVE-2026-17501 affect ggml-org llama.cpp, noting that these vulnerabilities enable remote exploitation, with no additional technical details or mitigation information provided.

    00010118
    1.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-17500 Null Pointer Dereference in ggml-org llama.cpp JSON Schema Grammar Conversion https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17500

    Post summary

    The notice merely labels CVE-2026-17500 as a null pointer dereference in ggml-org llama.cpp's JSON Schema Grammar Conversion; it lacks pointers to PoC, exploit code, or mitigation.

    00000114
    4.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-17500 A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipu… https://www.cve.org/CVERecord?id=CVE-2026-17500 ----- Traducción: CVE-2026-17500 Se … http://infoflow.cloud`

    Post summary

    A CVE-2026-17500 vulnerability in ggml-org llama.cpp's _visit_pattern function was reported, but no PoC, patches, or exploit details are provided.

    0000029
    95 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-17500 A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipu… https://www.cve.org/CVERecord?id=CVE-2026-17500

    Post summary

    CVE-2026-17500 was identified in the ggml-org llama.cpp project, affecting the _visit_pattern function in common/json-schema-to-grammar.cpp, with no additional details on exploitation or mitigations provided.

    00000898
    57.9K followersView on X

Explore more