6.1
MediumCVSS 3.1 · from VulnCheck
CVE-2024-58399
llama.cpp before b2731 Out-of-Bounds Read via GGUF Tensor Offsets
llama.cpp · Out-of-bounds read · CWE-125Affectedllama.cpp
FixA patch is linked in the references.
PublishedOct 27, 00:33 · VulnCheck
ScoredOct 27 · 6.1 · VulnCheck
Exploit code publicNone known · checked 21:18 UTC
ExploitedNone known · CISA KEV checked 22:06 UTC
What we know
No known exploitation. CISA KEV, checked 22:06 UTC.
No public exploit code known. Exploit-DB, Metasploit, Nuclei, checked 21:18 UTC.
An attacker needs local access to the machine. CVSS: local.
Someone has to open, click or run something first. CVSS: user interaction required.
A successful attack can take the service down. CVSS impact.
Description
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
From VulnCheck
Affected and fixed versions
ProductAffectedFixed inllama.cppb1046 – before b2731–
Exploit code
Exploit-DBnone knownMetasploitnone knownNucleinone known