Database/AI/ML frameworks & serving
llama.cpp / GGUF: Heap overflow in `GGUF_TYPE_ARRAY`/`GGUF_TYPE_STRING` parsing
CVSS 8.8CVE-2024-21825AI/ML frameworks & servingcurated
Impact
Heap overflow in GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing
Who can reach it
Customer-supplied GGUF file
What to do
Rebuild from a patched commit
References
Related entries
- llama.cpp / GGUF: Heap overflow in `header.n_tensors` handlingCVE-2024-21836 · llama.cpp / GGUFHigh
- llama.cpp / GGUF: Heap overflow in `gguf_fread_str`CVE-2024-23496 · llama.cpp / GGUFHigh
- llama.cpp / GGUF: Heap overflow in `header.n_kv`CVE-2024-23605 · llama.cpp / GGUFHigh
- Ollama: Path traversal in the digest fieldCVE-2024-37032 · OllamaHigh
- MLflow (model flavors): Deserialization RCE from a maliciously uploaded model (one of a family: 37052–37060)CVE-2024-37052 · MLflow (model flavors)High
- MLflow (recipes / pyfunc): RCE via a maliciously crafted MLprojectCVE-2024-37061 · MLflow (recipes / pyfunc)High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.