A flaw in the transform function of json-schema-to-grammar.cpp in ggml‑org llama.cpp causes uncontrolled recursion when processing certain JSON‑Schema inputs. The recursion can exhaust stack space and memory, leading to a denial‑of‑service condition for the vulnerable process. Because the flaw can be triggered by input supplied over the network, the attacker may launch it remotely. The pull request to fix this issue awaits acceptance.

Any installation of ggml‑org llama.cpp that incorporates the transform functionality, particularly the e15efe0 commit referenced in the advisory, is impacted. Exact version ranges are not provided, so all current builds that include the faulty code should be considered at risk.

The CVSS score of 6.9 classifies the issue as moderate severity. The EPSS score is < 1 %, indicating a very low but non‑zero likelihood of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The description indicates that the flaw can be exploited remotely by providing a specially crafted JSON‑Schema input, but no active exploit has been documented, suggesting a moderate real‑world risk at present.