llama.cpp

CVEs (6)

• CVE-2024-23605HigFeb 26, 2024
  Llama.cpp

  llama.cpp
  risk 0.57cvss 8.8epss 0.01

  A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

• CVE-2024-23496HigFeb 26, 2024
  Llama.cpp

  llama.cpp
  risk 0.57cvss 8.8epss 0.01

  A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

• CVE-2024-21836HigFeb 26, 2024
  Llama.cpp

  llama.cpp
  risk 0.57cvss 8.8epss 0.01

  A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

• CVE-2024-21825HigFeb 26, 2024
  Llama.cpp

  llama.cpp
  risk 0.57cvss 8.8epss 0.01

  A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this…

• CVE-2024-21802HigFeb 26, 2024
  Llama.cpp

  llama.cpp
  risk 0.57cvss 8.8epss 0.01

  A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

• CVE-2024-4897HigJul 2, 2024
  Lollms

  Lollms
  risk 0.55cvss 8.4epss 0.00

  parisneo/lollms-webui, in its latest version, is vulnerable to remote code execution due to an insecure dependency on llama-cpp-python version llama_cpp_python-0.2.61+cpuavx2-cp311-cp311-manylinux_2_31_x86_64. The vulnerability arises from the application's 'binding_zoo'…