LL
Product
llama.cpp
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 2Medium 1Low 0
Watch
Add llama.cpp to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-42479 | 9.8 | Aug 12 | llama.cpp allows write-what-where in rpc_server::set_tensor Affected: < b3561 |
| CVE-2024-42478 | 9.8 | Aug 12 | llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor Affected: < b3561 |
| CVE-2024-21825 | 9.8 | Feb 26 | A heap-based buffer overflow vulnerability exists in the GGUF library GGUF_TYPE_ARRAY/GGUF_TYPE_STRING parsing functionality of llama.cpp Commit 18c2e17 Affected: 18c2e17 |
| CVE-2024-23496 | 9.8 | Feb 26 | A heap-based buffer overflow vulnerability exists in the GGUF library gguf_fread_str functionality of llama.cpp Commit 18c2e17 Affected: 18c2e17 |
| CVE-2024-21836 | 9.8 | Feb 26 | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_tensors functionality of llama.cpp Commit 18c2e17 Affected: 18c2e17 |
| CVE-2024-23605 | 9.8 | Feb 26 | A heap-based buffer overflow vulnerability exists in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17 Affected: 0 |
Showing 6