Description (CNA)
llama.cpp provides LLM inference in C/C++. The unsafe `type` member in the `rpc_tensor` structure can cause `global-buffer-overflow`. This vulnerability may lead to memory data leakage. The vulnerability is fixed in b3561.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ggerganov / llama.cpp | affected < b3561 |
CWE
CWE-125
References
- https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-mqp6-7pv6-fqjf
- https://github.com/ggerganov/llama.cpp/commit/b72942fac998672a79a1ae3c03b340f7e629980b
ADP enrichment
No English description supplied.
No references supplied.