← CVE Intelligence

CVE-2024-21802

llama.cpp / llama.cpp PUBLISHED

Description (CNA)

A heap-based buffer overflow vulnerability exists in the GGUF library info->ne functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
llama.cpp / llama.cppaffected Commit 18c2e17

CWE

CWE-122

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.