Threats tagged 'ghsa-7wfj-q343-9m2r'

An out-of-bounds read vulnerability exists in llama.cpp versions before commit b3701 in the functions llama_decode_internal and llama_encode_internal. This flaw allows remote unauthenticated attackers to read memory or crash the process by sending crafted integer-array prompts with token IDs outside the valid range to the llama-server /completion endpoint.