Lucene search
GoogleOSV:CVE-2024-41130HistoryJul 22, 2024 - 6:15 p.m.
CVE-2024-41130
2024-07-2218:15:04
Google
osv.dev
3
llama.cpp
llm inference
null pointer dereference
gguf_init_from_file
software security
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
6.6
Confidence
High
EPSS
0
Percentile
9.4%
llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.
Related
cvelist
cvelist
CVE-2024-41130 llama.cpp null pointer dereference in gguf_init_from_file
2024-07-22 17:28:47
cve
cve
CVE-2024-41130
2024-07-22 18:15:04
nvd
nvd
CVE-2024-41130
2024-07-22 18:15:04
vulnrichment
vulnrichment
CVE-2024-41130 llama.cpp null pointer dereference in gguf_init_from_file
2024-07-22 17:28:47
CVSS3
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
AI Score
6.6
Confidence
High
EPSS
0
Percentile
9.4%
Related for OSV:CVE-2024-41130