Skip to content
OpenAdvisories
High · 8.8 CVE-2024-21836 EUVD-2024-19448GHSA-fhv7-8956-mv3h

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A special…

Published Feb 26, 2024 · Updated Nov 4, 2025 · Assigned by talos

Vendor: llama.cpp Product: llama.cpp

Description

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
llama.cpp llama.cpp Commit 18c2e17 —

References