HIGH🇵🇱 Wersja polska

CVE-2026-52130

CVSS 7.5v3.1pub. 2026-09-01upd. 2026-09-04

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  • Ggml Llama.cpp

    APP
    Ggml
    ≤ b5693
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
DoS
CWE
References

Related vulnerabilities

CVE-2026-34159CRITICAL9.8PL ✓same product

RCE w llama.cpp — brak walidacji granic w RPC backend (deserialization)

CVE-2024-42479CRITICAL10.0PL ✓same product

Zapis pod dowolny adres pamięci w llama.cpp poprzez wskaźnik rpc_tensor

CVE-2026-52131HIGH7.5same product

llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.

CVE-2026-52132HIGH7.5same product

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a d...

CVE-2026-43622HIGH8.5PL ✓same product

Double free w llama.cpp Android JNI — RCE lub DoS