CVE-2024-21825: Integer Overflow
A heap-based buffer overflow vulnerability exists in the GGUF library GGUFTYPEARRAY/GGUFTYPESTRING parsing functionality of llama.cpp Commit 18c2e17. A specially crafted .gguf file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-21825?
CVE-2024-21825 is classified as a critical vulnerability due to its potential to lead to arbitrary code execution.
How do I fix CVE-2024-21825?
To fix CVE-2024-21825, update the llama.cpp GGUF library to a version released after January 9, 2024.
What causes the CVE-2024-21825 vulnerability?
CVE-2024-21825 is caused by a heap-based buffer overflow in the GGUF library's parsing functionalities.
Who is affected by CVE-2024-21825?
Users of the llama.cpp GGUF library prior to the patch released after January 9, 2024, are affected by CVE-2024-21825.
What type of vulnerability is CVE-2024-21825?
CVE-2024-21825 is a heap-based buffer overflow vulnerability.