llama.cpp

Products

ProductCVEsExploitedLatest
llama.cpp5–Feb 26, 2024

Exploited and recent CVEs

  • CVE-2024-21825 High 8.8 A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to cod 1.3%
  • CVE-2024-23496 High 8.8 A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker c 1.3%
  • CVE-2024-21802 High 8.8 A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can 1.4%
  • CVE-2024-21836 High 8.8 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker 1.3%
  • CVE-2024-23605 High 8.8 A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can 1.3%