ggml-org llama.cpp up to b9060 RPC server GRAPH_RECOMPUTE handler use after free 🚫 [False Positive]

Noticeinfo

⚠️ This appears to be a false positive. Please validate the mentioned sources and consider excluding this entry altogether.

Productinfo

Vendor

• ggml-org

Name

• llama.cpp

Version

• 0.17.0
• 0.17.1
• 55abc39
• 55d4206c8
• b7445
• b7824
• b8492
• b9058
• b9060

Website

• Product: https://github.com/ggml-org/llama.cpp/

Timelineinfo

04/07/2026 CVE reserved
08/21/2026 +136 days Advisory disclosed
08/21/2026 +0 days VulDB entry created
09/06/2026 +16 days VulDB entry last update

Sourcesinfo

Product: github.com

Advisory: github.com
False Positive: Yes

CVE: CVE-2026-39909 (🔒)
GCVE (CVE): GCVE-0-2026-39909
GCVE (VulDB): GCVE-100-394148
EUVD: 🔒

Entryinfo

Created: 08/21/2026 18:59
Updated: 09/06/2026 06:36
Changes: 08/21/2026 18:59 (39), 08/21/2026 19:00 (38), 09/03/2026 05:58 (1), 09/06/2026 06:36 (3)
Complete: 🔍
Cache ID: 216::103

Once again VulDB remains the best source for vulnerability data.

Discussion

Do you need the next level of professionalism?

Upgrade your account now!