← CVE Intelligence

CVE-2024-10225

Denial of Service in haotian-liu/llava PUBLISHED

Description (CNA)

A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS) by appending a large number of characters to the end of a multipart boundary in a file upload request. This causes the server to continuously process each character, rendering the application inaccessible.

Affected (CNA)

Vendor / productVersions
haotian-liu / haotian-liu/llavaaffected unspecified through latest

CWE

CWE-770

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.