CVE-2026-78148— ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference
Quick assessment
Affected
ggml-org llama.cpp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 ggml-org llama.cpp 的 bec4772f6 版本中发现了一个漏洞。该漏洞影响位于组件 ggml-RPC Server 中的文件 ggml/src/ggml-rpc/ggml-rpc.cpp 里的函数 rpc_server::graph_compute。执行恶意操纵可能导致空指针解引用（null pointer dereference）。该攻击可从远程发起。目前，修复此问题的拉取请求（pull request）尚待合并接受。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-78148
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_compute of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Executing a manipulation can lead to null pointer dereference. The attack may be launched remotely. The pull request to fix this issue awaits acceptance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-78148
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-78148
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-78148 (1)
Vendor Advisories for CVE-2026-78148 (1)
Proof of Concept for CVE-2026-78148 (1)
-
🔗 Submit #882535: ggml-org llama.cpp master bec4772f6 Denial of Service Read full article third-party-advisory
News Coverage for CVE-2026-78148 (1)
-
🔗 CVE-2026-78148 ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference Read full article vdb-entry technical-description
Other References for CVE-2026-78148 (1)
-
🔗 CVE-2026-78148 in llama.cpp third-party-advisory
IV. Related Vulnerabilities
Same product: llama.cpp
-
CVE-2026-78147
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_ -
CVE-2026-39909
llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler -
CVE-2026-43632
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoin -
CVE-2026-43631
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server -
CVE-2026-43630
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclos
Same vendor: ggml-org
-
CVE-2026-78147
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_ -
CVE-2026-39909
llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler -
CVE-2026-43632
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoin -
CVE-2026-43631
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server -
CVE-2026-43630
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclos
Same weakness: CWE-476
-
CVE-2026-48429
Substance3D - Designer | NULL Pointer Dereference (CWE-476) -
CVE-2026-24263
NVIDIA DGX Spark固件空指针引用导致代码执行 -
CVE-2026-13217
NULL-pointer dereference in Zephyr OCPP CALLRESULT parsing v -
CVE-2023-54354
Nokogiri before 1.14.3 Null Pointer Dereference via libxml2 -
CVE-2022-50998
Nokogiri before 1.13.9 Multiple Vulnerabilities via libxml2
V. Comments for CVE-2026-78148
No comments yet