CVE-2024-58400

Versions of llama.cpp prior to b3701 are susceptible to an out-of-bounds read vulnerability within the llama_decode_internal and llama_encode_internal functions. This flaw is caused by a lack of validation on token IDs; remote unauthenticated attackers can exploit this by sending integer-array pr...

OSV-2024-1266 UNKNOWN READ in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376770771 Crash type: UNKNOWN READ Crash state: llamaoutputreserve llamadecode fuzztokenizer.cpp...

OSV-2024-1253 Segv on unknown address in llama_output_reserve

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=376331508 Crash type: Segv on unknown address Crash state: llamaoutputreserve llamadecode fuzztokenizer.cpp...