5.3Orta
CVE-2026-86317ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion
Açıklama
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be carried out remotely. The reported GitHub issue was closed automatically due to inactivity.
Zayıflık türü (CWE):
CWE-617
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
Kaynaklar ve yamalar
- VDB-399508 | ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion vdb-entrytechnical-description
- VDB-399508 | CTI Indicators (IOB, IOC, IOA) signature
- CVE-2026-86317 | CVE Analysis and Report third-party-advisory
- Submit #908271 | ggml-org llama.cpp master e9fa0781f Assertion third-party-advisory
- https://github.com/ggml-org/llama.cpp/issues/25288 issue-tracking
- https://github.com/ggml-org/llama.cpp/ product