Veille CVE

Mardi 1 septembre 2026

3 CVE

  1. CVE-2026-52132 7.5 Élevée

    Ggml llama.cpp

    llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n value in a POST request to /rerank.

  2. CVE-2026-52131 7.5 Élevée

    Ggml llama.cpp

    llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.

  3. CVE-2026-52130 7.5 Élevée

    Ggml llama.cpp

    llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.