Skip to content
OpenAdvisories
High · 8.8 CVE-2024-23496 EUVD-2024-20992GHSA-w4wv-vq5v-xp26

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially…

Published Feb 26, 2024 · Updated Nov 4, 2025 · Assigned by talos

Vendor: llama.cpp Product: llama.cpp

Description

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
llama.cpp llama.cpp Commit 18c2e17 —

References