Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-17500 and CVE-2026-17501: ggml-org llama․cpp vulnerabilities allow remote exploitation https://ift.tt/LGnjI7u
Post summary
Two new CVEs, CVE-2026-17500 and CVE-2026-17501, have been disclosed for ggml-org llama.cpp, noting that they allow remote exploitation; no PoC, exploit, active usage, patch, or debunking information is provided.
CVE-2026-17501 Resource Allocation Vulnerability in ggml-org llama.cpp JSON-Schema-to-GBNF Conversion https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-17501
Post summary
A new resource allocation vulnerability (CVE‑2026‑17501) affecting the JSON‑Schema‑to‑GBNF conversion in ggml‑org llama.cpp has been identified; no PoC, exploit, or patch information is provided.
🚨*CVE* CVE-2026-17501 A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component … https://www.cve.org/CVERecord?id=CVE-2026-17501 ----- Traducción: CVE-2026-17501 Se … http://infoflow.cloud`
Post summary
A new CVE (CVE‑2026‑17501) has been announced, affecting a specific function in ggml‑org llama.cpp, but no PoC, exploit, patch, or evidence of exploitation is provided.
CVE-2026-17501 A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component … https://www.cve.org/CVERecord?id=CVE-2026-17501
Post summary
A new CVE affecting the transform function in llama.cpp has been reported; the post provides minimal information and no evidence of exploitation or remediation.