G
Vendor security profile
ggml
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical3
CISA KEV0
Public exploit1
Patch rate%77
Avg. CVSS8.0
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
10
3
0
CVE KEV
CVE severity distribution
13toplam CVE
Critical3 (23%)
High8 (62%)
Medium2 (15%)
Patch and exploitation view
%77
Verified patch
%0
CISA KEV
%8
Public exploit
10Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
9.2
CVE-2026-107183
llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser
G
Patch verifiedEPSS %0
7.5
CVE-2026-52131
Vulnerability in N/a
N
Patch status unknownEPSS %0
7.5
CVE-2026-52130
Vulnerability in N/a
N
Patch status unknownEPSS %0
7.5
CVE-2026-52132
Vulnerability in N/a
N
Patch status unknownEPSS %1
6.9
CVE-2026-78148
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference
G
Patch verifiedEPSS %1
6.9
CVE-2026-78147
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization
G
Patch status unknownEPSS %1
9.2
CVE-2026-39909
llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler
G
Patch verifiedEPSS %1
9.2
CVE-2026-43632
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints
G
Patch verifiedEPSS %0
9.2
CVE-2026-43631
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server
G
Patch verifiedEPSS %1
6.3
CVE-2026-43630
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure
G
Patch verifiedEPSS %0