EUVD-2024-20992

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

A buffer overflow in GGUF library can allow code execution via malicious .gguf file upload

Reporter	Title	Published	Views	Family All 13
AlpineLinux	CVE-2024-23496	26 Feb 202416:07	–	alpinelinux
Circl	CVE-2024-23496	14 Mar 202409:51	–	circl
CNNVD	llama.cpp Input Validation Error Vulnerability	26 Feb 202400:00	–	cnnvd
CVE	CVE-2024-23496	26 Feb 202416:07	–	cve
Cvelist	CVE-2024-23496	26 Feb 202416:07	–	cvelist
Debian CVE	CVE-2024-23496	26 Feb 202416:07	–	debiancve
NVD	CVE-2024-23496	26 Feb 202416:27	–	nvd
Prion	Heap overflow	26 Feb 202416:27	–	prion
Positive Technologies	PT-2024-2168 · Unknown · Gguf Library	26 Feb 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-23496	5 Feb 202507:14	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "619002ed-80a8-38db-9ad9-80a7c5d70539",
        "vendor": {
          "name": "llama.cpp"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "4ce0c655-adc4-389b-9c83-40ba5f3b4d08",
        "product": {
          "name": "llama.cpp"
        },
        "product_version": "Commit 18c2e17"
      },
      {
        "id": "619002ed-80a8-38db-9ad9-80a7c5d70539",
        "product": {
          "name": "llama.cpp"
        }
      }
    ]
  }
]

Source	Link
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2024-1913
talosintelligence	www.talosintelligence.com/vulnerability_reports/TALOS-2024-1913

03 Oct 2025 20:07Current

9High risk

Vulners AI Score9

CVSS 3.18.8 - 9.8

EPSS0.00182

SSVC