11 matches found
CVE-2025-71439 llama.cpp before b5649 Heap Out-of-Bounds Read via llama_vocab::impl::print_info
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...
CVE-2025-71439
Versions of llama.cpp before b5649 are vulnerable to a heap out-of-bounds read in llama_vocab::impl::print_info(). An attacker can crash llama-cli or llama-server during model loading by providing a crafted GGUF model with an oversized special token ID and a short tokenizer.ggml.tokens array, for...
EUVD-2025-211201
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llamavocab::impl::printinfo that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-serve...
llamacpp:fuzz_structured: Heap-buffer-overflow in llama_hparams::n_head
Detailed Report: https://oss-fuzz.com/testcase?key=6459424487833600 Project: llamacpp Fuzzing Engine: libFuzzer Fuzz Target: fuzzstructured Job Type: libfuzzerasanllamacpp Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x7b00b4ae6660 Crash State: llamahparams::nhead...
CVE-2018-14049
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function printinfo in wavinfo/wavinfo.c...
EUVD-2018-5975
Malware in sbrugna...
CVE-2018-14049
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function printinfo in wavinfo/wavinfo.c...
CVE-2018-14049
An issue has been found in libwav through 2017-04-20. It is a SEGV in the function printinfo in wavinfo/wavinfo.c...
CVE-2018-14049
Summary: CVE-2018-14049 affects the libwav WAV encoding library (C) up to 2017-04-20. The issue is a segmentation fault in the function print_info located at wav_info/wav_info.c, which can trigger a crash (denial of service). The connected Red Hat/CNVD entries corroborate a SEGV in libwav’s print...
