Vulnerability · Published Aug 23, 2026 · Assigned by VulDB

CVE-2026-78148ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference

Medium 5.3

In plain English

A medium-severity null pointer dereference in llama.cpp from ggml-org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.7%top 45.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:14	llama.cpp	no fix listed	DEBIAN-CVE-2026-78148
Ubuntu:26.04:LTS	llama.cpp	no fix listed	UBUNTU-CVE-2026-78148
Ubuntu:26.10	llama.cpp	no fix listed	UBUNTU-CVE-2026-78148

Affected products (as reported)

Vendor	Product	Versions
ggml-org	llama.cpp	bec4772f6

Weakness: CWE-476, CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R

References

VDB-394535 | ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference vdb-entry, technical-description
VDB-394535 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-78148 | CVE Analysis and Report third-party-advisory
Submit #882535 | ggml-org llama.cpp master bec4772f6 Denial of Service third-party-advisory
https://github.com/ggml-org/llama.cpp/issues/25299 issue-tracking
https://github.com/ggml-org/llama.cpp/pull/25670 issue-tracking, patch
https://github.com/ggml-org/llama.cpp/ product