Bug 2521692 (CVE-2026-78148) - CVE-2026-78148 llama.cpp: llama.cpp ggml-RPC Server: Denial of Service via null pointer dereference
Summary: CVE-2026-78148 llama.cpp: llama.cpp ggml-RPC Server: Denial of Service via nu...
Keywords:
Status: NEW
Alias: CVE-2026-78148
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2547299 2547300 2547301 2547302 2547303
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-08-23 23:31 UTC by OSIDB Bzimport
Modified: 2026-10-07 08:10 UTC (History)
3 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-08-23 23:31:21 UTC 
A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.
Note You need to log in before you can comment on or make changes to this bug.