网安资讯详情 - SecLens 情报雷达

CVE-2026-17501 | ggml-org llama.cpp e15efe0 JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform allocation of resources (Issue 25283)

来源： vuldb · 发布时间 2026-07-27 01:39 (UTC+08:00) · 抓取时间 2026-07-27 02:01 (UTC+08:00)

原文链接

摘要

A vulnerability was found in <a href="https://vuldb.com/product/ggml-org:llama">ggml-org llama.cpp e15efe0</a>. It has been classified as <a href="https://vuldb.com/kb/risk">critical</a>. This vulnerability affects the function <code>transform</code> of the file <em>common/json-schema-to-grammar.cpp</em> of the component <em>JSON-Schema-to-GBNF Conversion</em>. This manipulation causes allocation of resources. This vulnerability appears as <a href="https://vuldb.com/cve/CVE-2026-17501">CVE-2026-17501</a>. The attack may be initiated remotely. There is no available exploit. The pull request to fix this issue awaits acceptance.

标签

• CVE-2026-17501

扩展字段

{
  "raw_pub_date": "Sun, 26 Jul 2026 19:39:00 +0200"
}