Threats tagged 'ghsa-3r8c-j789-2864'

A heap out-of-bounds write vulnerability exists in llama.cpp versions from b5899 up to but not including b10261 in the function llm_tokenizer_plamo2::build. This flaw allows attackers to corrupt heap memory by supplying crafted GGUF models containing BYTE-typed token text with negative parsed values. The vulnerability can cause application crashes and may lead to potential code execution during model loading.