841 matches found
The vulnerability of the `info->ne` function in the llama.cpp file of the GGUF library allows a hacker to execute arbitrary code.
The vulnerability of the info-ne function in the llama.cpp file of the GGUF library is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
CVE-2024-23605
A heap-based buffer overflow vulnerability exists in the GGUF library header.nkv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-23496
A heap-based buffer overflow vulnerability exists in the GGUF library gguffreadstr functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21825
A heap-based buffer overflow vulnerability exists in the GGUF library GGUFTYPEARRAY/GGUFTYPESTRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21802
A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21825
A heap-based buffer overflow vulnerability exists in the GGUF library GGUFTYPEARRAY/GGUFTYPESTRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-23496
A heap-based buffer overflow vulnerability exists in the GGUF library gguffreadstr functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21802
A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21836
A heap-based buffer overflow vulnerability exists in the GGUF library header.ntensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21802
A heap-based buffer overflow vulnerability exists in the GGUF library info-ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
llama.cpp Input Validation Error Vulnerability
llama.cpp is a multimodal model by the individual developer Georgi Gerganov. An input validation error vulnerability exists in versions of llama.cpp prior to 18c2e17, which stems from a heap-based buffer overflow vulnerability in the header.nkv function in GGUF, where a specially crafted .gguf fi...
PT-2024-1985
Name of the Vulnerable Software and Affected Versions GGUF library affected versions not specified Description A heap-based buffer overflow vulnerability exists in the GGUF library's header.n kv functionality of llama.cpp. This issue can be triggered by a specially crafted .gguf file, potentially...
PT-2024-2169
Name of the Vulnerable Software and Affected Versions GGUF library version prior to the fix of Commit 18c2e17 Description A heap-based buffer overflow vulnerability exists in the GGUF library's info-ne functionality of llama.cpp. This issue can be exploited by providing a specially crafted .gguf...
llama.cpp GGUF library header.n_kv heap-based buffer overflow vulnerability
Talos Vulnerability Report TALOS-2024-1916 llama.cpp GGUF library header.nkv heap-based buffer overflow vulnerability February 26, 2024 CVE Number CVE-2024-23605 SUMMARY A heap-based buffer overflow vulnerability exists in the GGUF library header.nkv functionality of llama.cpp Commit 18c2e17. A...
llama.cpp Input Validation Error Vulnerability
llama.cpp is a multimodal model by Georgi Gerganov Personal Developer. An input validation error vulnerability exists in llama.cpp, which stems from a specially crafted .gguf file that could lead to code execution...
PT-2024-2029
Name of the Vulnerable Software and Affected Versions GGUF library affected versions not specified Description A heap-based buffer overflow vulnerability exists in the GGUF library's header.n tensors functionality of llama.cpp Commit 18c2e17. This issue is related to an integer overflow in the...
Arbitrary Code Execution
llama-hub is vulnerable to Arbitrary Code Execution. The vulnerability is due to missing safeload configuration during YAML parsing. An attackers can execute arbitrary code by exploiting this vulnerability...
Unsafe yaml deserialization in llama-hub
The OpenAPI and ChatGPT plugin loaders in LlamaHub aka llama-hub before 0.0.67 allow attackers to execute arbitrary code because safeload is not used for YAML...
PT-2024-20057
Name of the Vulnerable Software and Affected Versions LlamaIndex aka llama index versions 0.9.34 and earlier Description The issue allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and...
