CVE-2026-7482

CVE-2026-7482: Воспроизведение Heap OOB Read в GGUF Ollama Этот репозиторий содержит мой локальный скрипт воспроизведения для CVE-2026-7482 — чтения за пределами выделенной памяти heap out-of-bounds read в уязвимых путях загрузки и квантизации GGUF в Ollama. Важный результат этой работы узок: мне...

PT-2026-34454

Name of the Vulnerable Software and Affected Versions Ollama affected versions not specified Description An out-of-bounds memory read and write issue exists in the GGUF GPT-Generated Unified Format quantization engine. This occurs because the engine lacks proper bounds checking and trusts tensor...

Mind the Gap: a Practical Attack on GGUF Quantization

With the increasing size of frontier LLMs, post-training quantization has become the standard for memory-efficient deployment. Recent work has shown that basic rounding-based quantization schemes pose security risks, as they can be exploited to inject malicious behaviors into quantized models tha...