CVE-2026-17501

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-17501", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-07-26T17:33:47.225Z", "datePublished": "2026-07-27T00:30:11.082Z", "dateUpdated": "2026-07-29T04:43:05.523Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-29T04:43:05.523Z"}, "title": "ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-674", "lang": "en", "description": "Uncontrolled Recursion"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "ggml-org", "product": "llama.cpp", "versions": [{"version": "e15efe0", "status": "affected"}], "cpes": ["cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"], "modules": ["JSON-Schema-to-GBNF Conversion"]}], "descriptions": [{"lang": "en", "value": "A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R", "baseSeverity": "MEDIUM"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-07-26T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-07-26T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-07-29T06:44:46.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "m00dy (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "m00dy (VulDB User)", "type": "analyst"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/383354", "name": "VDB-383354 | ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/383354/cti", "name": "VDB-383354 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-17501", "name": "CVE-2026-17501 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/798504", "name": "Submit #798504 | ggml-org llama.cpp (confirmed on commit e15efe0 / tag b8635+1) Uncontrolled Recursion", "tags": ["third-party-advisory"]}, {"url": "https://github.com/ggml-org/llama.cpp/issues/25283", "tags": ["issue-tracking"]}, {"url": "https://github.com/ggml-org/llama.cpp/pull/25308", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/ggml-org/llama.cpp/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202607"]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-27T17:05:27.959542Z", "id": "CVE-2026-17501", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-27T20:23:44.187Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-17501", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-27T17:05:27.959542Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-27T17:05:37.008Z"}}], "cna": {"title": "ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion", "credits": [{"lang": "en", "type": "reporter", "value": "m00dy (VulDB User)"}, {"lang": "en", "type": "analyst", "value": "m00dy (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 5, "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"], "vendor": "ggml-org", "modules": ["JSON-Schema-to-GBNF Conversion"], "product": "llama.cpp", "versions": [{"status": "affected", "version": "e15efe0"}]}], "timeline": [{"lang": "en", "time": "2026-07-26T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-07-26T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-07-29T06:44:46.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/383354", "name": "VDB-383354 | ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/383354/cti", "name": "VDB-383354 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-17501", "name": "CVE-2026-17501 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/798504", "name": "Submit #798504 | ggml-org llama.cpp (confirmed on commit e15efe0 / tag b8635+1) Uncontrolled Recursion", "tags": ["third-party-advisory"]}, {"url": "https://github.com/ggml-org/llama.cpp/issues/25283", "tags": ["issue-tracking"]}, {"url": "https://github.com/ggml-org/llama.cpp/pull/25308", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/ggml-org/llama.cpp/", "tags": ["product"]}], "x_generator": ["VulDB PVTS v202607"], "descriptions": [{"lang": "en", "value": "A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-674", "description": "Uncontrolled Recursion"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-07-29T04:43:05.523Z"}}}, "cveMetadata": {"cveId": "CVE-2026-17501", "state": "PUBLISHED", "dateUpdated": "2026-07-29T04:43:05.523Z", "dateReserved": "2026-07-26T17:33:47.225Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-07-27T00:30:11.082Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:ggml-org:llama.cpp:*:*:*:*:*:*:*:*"], "modules": ["JSON-Schema-to-GBNF Conversion"], "product": "llama.cpp", "vendor": "ggml-org", "versions": [{"status": "affected", "version": "e15efe0"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance."}, {"lang": "es", "value": "Se ha encontrado una falla en ggml-org llama.cpp e15efe0. Esta vulnerabilidad afecta a la funci\u00f3n transform del archivo common/json-schema-to-grammar.cpp del componente Conversi\u00f3n de JSON-Schema a GBNF. Esta manipulaci\u00f3n causa la asignaci\u00f3n de recursos. El ataque puede iniciarse remotamente. La solicitud de extracci\u00f3n para solucionar este problema espera aceptaci\u00f3n."}], "id": "CVE-2026-17501", "lastModified": "2026-10-24T13:10:00.147", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 6.9, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-17501", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-27T17:05:27.959542Z", "version": "2.0.3"}}]}, "published": "2026-07-27T01:16:26.570", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/ggml-org/llama.cpp/"}, {"source": "cna@vuldb.com", "url": "https://github.com/ggml-org/llama.cpp/issues/25283"}, {"source": "cna@vuldb.com", "url": "https://github.com/ggml-org/llama.cpp/pull/25308"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-17501"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/798504"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/383354"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/383354/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}, {"lang": "en", "value": "CWE-674"}], "source": "cna@vuldb.com", "type": "Primary"}]}

{"bugzilla": {"description": "llama.cpp: llama.cpp: Denial of Service due to resource allocation manipulation in JSON-Schema-to-GBNF Conversion", "id": "2507392", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507392"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.3", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-1050", "details": ["A flaw was found in llama.cpp. A remote attacker could exploit a vulnerability in the JSON-Schema-to-GBNF Conversion component, specifically within the `transform` function. This flaw allows for the manipulation of resource allocation, which can lead to a denial of service (DoS) by exhausting available system resources."], "name": "CVE-2026-17501", "public_date": "2026-07-27T00:30:11Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-17501\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-17501\nhttps://github.com/ggml-org/llama.cpp/\nhttps://github.com/ggml-org/llama.cpp/issues/25283\nhttps://github.com/ggml-org/llama.cpp/pull/25308\nhttps://vuldb.com/cve/CVE-2026-17501\nhttps://vuldb.com/submit/798504\nhttps://vuldb.com/vuln/383354\nhttps://vuldb.com/vuln/383354/cti"], "statement": "Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the affected packages, refer to the linked references.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "e15efe0"}}], "enrichment": {"confidence": 88.0, "confidence_source": "matching", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 88.0, "source": "matching"}]}, "original": {"product": "llama.cpp", "source": "cna", "vendor": "ggml-org"}, "product": "llama.cpp", "vendor": "ggml"}], "created": "2026-07-27T15:23:07.057612+00:00", "updated": "2026-08-02T12:00:03.659651+00:00", "vendors": ["ggml", "ggml$PRODUCT$llama.cpp"]}