Threats tagged 'ghsa-3jhp-qv93-3428'

An integer overflow vulnerability exists in llama.cpp versions from b10398 up to but not including b11301 in the function gguf_init_from_reader. This flaw allows attackers to bypass tensor element-count validation by providing shapes whose product wraps to zero, enabling the creation of GGUF files with excessively large tensor extents. This overflow leads to incorrect buffer sizing and out-of-bounds memory access.