Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/op_params results in deserialization. The attack may be initiated remotely. This vulnerability is distinct from CVE-2026-34159 (GHSA-j8rj-fmpv-wcxw, PR #20908), which only added a buffer==nullptr rejection in create_node() and does not validate op or op_params. The reported GitHub issue was closed automatically due to inactivity.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-23 | 3 | General3 |
| 2026-08-31 | 1 | Disclosure1 |
CVE-2026-78147 A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the c… https://www.cve.org/CVERecord?id=CVE-2026-78147
Post summary
The post merely announces the existence of CVE-2026-78147 in ggml-org llama.cpp’s deserialize_tensor function, with no additional info regarding exploitation, fixes, or technical details.
🚨 HIGH SEVERITY: CVE-2026-78147 (CVSS 7.3) Deserialization flaw in llama[.]cpp ggml-RPC Server allows remote exploitation. Affects deserialize_tensor function. Impact: Confidentiality, Integrity, Availability compromise #CVE #Vulnerability #PatchNow https://t.co/ObBuUBupw2
Post summary
The tweet announces a high‑severity CVE-2026-78147, providing technical details of a deserialization flaw in llama.cpp’s ggml‑RPC server, but no PoC, exploit, active exploitation, or patch information.
🚨*CVE* CVE-2026-78147 A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the c… https://www.cve.org/CVERecord?id=CVE-2026-78147 ----- Traducción: CVE-2026-78147 Se … http://infoflow.cloud`
Post summary
A brief notice identifies CVE‑2026‑78147 in ggml-org llama.cpp, citing the affected function but providing no exploit, mitigation, or active exploitation details.
CVE-2026-78147 Deserialization Vulnerability in ggml-org llama.cpp ggml-RPC Server https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-78147 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
A brief notification announcing CVE‑2026‑78147, a deserialization vulnerability in the ggml‑RPC server of ggml‑org llama.cpp, provides only links to external sources without details on PoC, exploits, or patches.