Skip to content
OpenAdvisories

Product · ggerganov

llama.cpp

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-42478

    llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor

    llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561.

    ggerganov llama.cpp
  • Medium 5.3
    CVE-2024-42477

    llama.cpp global-buffer-overflow in ggml_type_size

    llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.

    ggerganov llama.cpp
  • Medium 5.4
    CVE-2024-41130

    llama.cpp null pointer dereference in gguf_init_from_file

    llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.

    ggerganov llama.cpp