A heap-based buffer overflow vulnerability exists in the GGUF library's gguf_fread_str function in llama.cpp (commit 18c2e17). This flaw allows an attacker to trigger code execution by providing a specially crafted .gguf file. The vulnerability has a high severity with a CVSS score of 8.8.