Skip to content
OpenAdvisories
High · 8.8 CVE-2024-23605 EUVD-2024-21099GHSA-c9jh-pp3m-mqr9

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially cr…

Published Feb 26, 2024 · Updated Nov 4, 2025 · Assigned by talos

Vendor: llama.cpp Product: llama.cpp

Description

A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
llama.cpp llama.cpp Commit 18c2e17 —

References