Lucene search
HistoryFeb 26, 2024 - 4:27 p.m.
CVE-2024-23496
vulnerability
code execution
malicious file
gguf library
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.1%
A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Related
cvelist
cvelist
CVE-2024-23496
2024-02-26 16:07:52
vulnrichment
vulnrichment
CVE-2024-23496
2024-02-26 16:07:52
prion
prion
Heap overflow
2024-02-26 16:27:00
cve
cve
CVE-2024-23496
2024-02-26 16:27:56
talos
talos
talosblog
talosblog
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
39.1%
Related for NVD:CVE-2024-23496