Threats tagged 'ghsa-52pf-v9gp-98qj'

An integer overflow vulnerability exists in llama.cpp versions from b5854 up to but not including b11275 in the function gguf_init_from_reader. This flaw allows crafted GGUF files with tensor sizes padded near SIZE_MAX to bypass size checks, resulting in undersized data blobs and out-of-bounds reads. The vulnerability has a medium severity rating with a CVSS score of 6.1.