Skip to content
OpenAdvisories
High · 8.8 CVE-2024-21825 EUVD-2024-19437GHSA-5998-89hj-xhfc

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp C…

Published Feb 26, 2024 · Updated Nov 4, 2025 · Assigned by talos

Vendor: llama.cpp Product: llama.cpp

Description

A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
llama.cpp llama.cpp Commit 18c2e17 —

References