4 matches found
UBUNTU-CVE-2026-21869
llama.cpp is an inference of several LLM models in C/C++. In commits 55d4206c8 and prior, the ndiscard parameter is parsed directly from JSON input in the llama.cpp server's completion endpoints without validation to ensure it's non-negative. When a negative value is supplied and the context fill...
PT-2026-2109
Name of the Vulnerable Software and Affected Versions llama.cpp versions prior to commit 55d4206c9 Description llama.cpp is an inference engine for several Large Language Models LLMs implemented in C/C++. The software parses the n discard parameter directly from JSON input in its completion...
SUSE CVE-2024-50610
GSL GNU Scientific Library through 2.8 has an integer signedness error in gslsimansolvemany in siman/siman.c. When params.ntries is negative, incorrect memory allocation occurs...
The vulnerability of the tif_getimage.c component in the LibTIFF library, related to writing beyond the buffer boundaries, allows an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the tifgetimage.c component in the LibTIFF library is related to a buffer overflow vulnerability. This could potentially lead to a buffer overflow through the creation of an RGBA image, due to the presence of the “Nagative-size-param” condition. Exploiting this vulnerability...