Skip to content
OpenAdvisories
High · 8.8 CVE-2024-21802 EUVD-2024-19414GHSA-gwh5-fh5x-ww83

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially cr…

Published Feb 26, 2024 · Updated Nov 4, 2025 · Assigned by talos

Vendor: llama.cpp Product: llama.cpp

Description

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
llama.cpp llama.cpp Commit 18c2e17 —

References