llama.cpp

5 results · Feed

• Critical 10.0
  CVE-2024-42479

  llama.cpp allows write-what-where in rpc_server::set_tensor

  llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This vulnerability is fixed in b3561.

  ggerganov llama.cpp
  Aug 12, 2024
• Medium 5.3
  CVE-2024-42478

  llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor

  llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561.

  ggerganov llama.cpp
  Aug 12, 2024
• Medium 5.3
  CVE-2024-42477

  llama.cpp global-buffer-overflow in ggml_type_size

  llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.

  ggerganov llama.cpp
  Aug 12, 2024
• Medium 5.4
  CVE-2024-41130

  llama.cpp null pointer dereference in gguf_init_from_file

  llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.

  ggerganov llama.cpp
  Jul 22, 2024
• High 7.1
  CVE-2024-32878

  Use of Uninitialized Variable Vulnerability in llama.cpp

  Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in gguf_init_from_file, the code will free this uninitialized variable later. In a simple POC, it will directly cause a crash. If the file is carefully constructe…

  ggerganov llama.cpp
  Apr 26, 2024