← CVE Intelligence

CVE-2024-23496

llama.cpp / llama.cpp PUBLISHED

Description (CNA)

A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected (CNA)

Vendor / productVersions
llama.cpp / llama.cppaffected Commit 18c2e17

CWE

CWE-190

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.