Threats tagged 'ghsa-xf8w-pfxh-7xj3'

An out-of-bounds read vulnerability exists in llama.cpp before commit b2731 within the llama_model_loader component. This flaw allows attackers to craft GGUF model files with arbitrary 64-bit tensor offsets that cause the process to read memory outside the mapped model file. Exploitation can lead to process crashes or unintended memory disclosure by loading adjacent process memory as model weights.