CVE-2026-25048

xgrammar <0.1.32 - Memory Corruption

Title source: llm

Description

xgrammar is an open-source library for efficient, flexible, and portable structured generation. Prior to version 0.1.32, the multi-level nested syntax caused a segmentation fault (core dumped). This issue has been patched in version 0.1.32.

Scores

EPSS 0.0004
EPSS Percentile 12.6%

Classification

CWE
CWE-674
Status draft

Affected Products (1)

pypi/xgrammar < 0.1.32PyPI

Timeline

Published Mar 05, 2026
Tracked Since Mar 05, 2026