CVE-2026-17500 — ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference
A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation resu…
Published: 2026-07-27 · CVSS: 6.9 · CVSS 4.0
A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation results in null pointer dereference. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7