CVE-2026-78148

EUVD-2026-64672
A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 52.63%
Debian logo
Debian Releases
Debian Product
Codename
llama.cpp
forky
vulnerable
sid
vulnerable
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
llama.cpp
jammy
dne
noble
dne
resolute
needs-triage
Common Weakness Enumeration
References
https://github.com/ggml-org/llama.cpp/
https://github.com/ggml-org/llama.cpp/issues/25299
https://github.com/ggml-org/llama.cpp/pull/25670
https://vuldb.com/cve/CVE-2026-78148
https://vuldb.com/submit/882535
https://vuldb.com/vuln/394535
https://vuldb.com/vuln/394535/cti