G
Vendor security profile
ggml-org
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs15
Critical5
CISA KEV0
Public exploit2
Patch rate%87
Avg. CVSS7.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
14
0
1
CVE KEV
CVE severity distribution
15toplam CVE
Critical5 (33%)
High5 (33%)
Medium5 (33%)
Patch and exploitation view
%87
Verified patch
%0
CISA KEV
%13
Public exploit
13Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
9.2
CVE-2026-107183
llama.cpp before b11393 Use-After-Free via common_chat_peg_mapper chat_parser
G
Patch verifiedEPSS %0
6.9
CVE-2026-78148
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference
G
Patch verifiedEPSS %1
6.9
CVE-2026-78147
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization
G
Patch status unknownEPSS %1
9.2
CVE-2026-39909
llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler
G
Patch verifiedEPSS %1
9.2
CVE-2026-43632
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints
G
Patch verifiedEPSS %0
9.2
CVE-2026-43631
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server
G
Patch verifiedEPSS %1
6.3
CVE-2026-43630
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclosure
G
Patch verifiedEPSS %0
9.2
CVE-2026-43629
llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore
G
Patch verifiedEPSS %1
8.5
CVE-2026-43628
llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
G
Patch verifiedEPSS %0
8.5
CVE-2026-43627
llama.cpp b1283–b9058 Integer Overflow in llama_batch_init() Function
G
Patch verifiedEPSS %0