01 Record

CVE-2026-39909

llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

CriticalPUBLISHEDCNA: VulnCheck

Base score9.2 CVSS v4.0CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

02 Description

llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler

Published

2026-08-21 16:28Z9 HR AGO

Last updated

2026-08-21 21:43Z3 HR AGO

Reserved

2026-04-07

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

Critical (CVSS 9.2)

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

4d97d270e19c7a03fd9d330e263ee5cf09f32e86c72ffc5c4109267cbaa54f6c

VendorProductVersionsPlatforms

ggml-orgllama.cpp0 to < b8585—