Threats tagged 'ghsa-pmf8-m38j-h768'

An out-of-bounds write vulnerability exists in llama.cpp versions from b8841 up to but not including b11865 in the ggml-rpc RDMA transport's rdma_recv() function. This flaw allows unauthenticated peers that advertise RDMA capabilities in the HELLO message to overflow a 1-byte stack variable by sending up to 256 KiB of data, potentially crashing the server or enabling code execution.