Threats tagged 'ghsa-4qpr-vwfh-qwp4'

A heap out-of-bounds read vulnerability exists in llama.cpp before commit b5649 within the function llama_vocab::impl::print_info(). This flaw allows attackers to crash the model loading process by supplying a specially crafted GGUF model with an undersized tokenizer.ggml.tokens array, causing out-of-bounds access and application crash.