CVE-2024-32878

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-32878

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-32878.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2024-32878

Aliases

GHSA-p5mv-gjc5-mwqv

Published

2024-04-26T20:31:53.813Z

Modified

2026-06-15T12:20:46.142668259Z

Severity

7.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L CVSS Calculator

Summary

Use of Uninitialized Variable Vulnerability in llama.cpp

Details

Llama.cpp is LLM inference in C/C++. There is a use of uninitialized heap variable vulnerability in ggufinitfrom_file, the code will free this uninitialized variable later. In a simple POC, it will directly cause a crash. If the file is carefully constructed, it may be possible to control this uninitialized value and cause arbitrary address free problems. This may further lead to be exploited. Causes llama.cpp to crash (DoS) and may even lead to arbitrary code execution (RCE). This vulnerability has been patched in commit b2740.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/32xxx/CVE-2024-32878.json",
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-456"
    ]
}

References

Affected packages

Git / github.com/ggml-org/llama.cpp

Affected ranges

Type

GIT

Repo

https://github.com/ggml-org/llama.cpp

Events

Introduced

192090bae47960f0d38d4967abe398a5d190057e

Fixed

d4a9afc1009f0da88d04b2c5f672d81d5ae94675

Fixed

928e0b7013c862cf10701957b3d654aa70f11bd8

Database specific

{
    "extracted_events": [
        {
            "introduced": "b2715"
        },
        {
            "fixed": "b2740"
        }
    ],
    "cpe": "cpe:2.3:a:ggml:llama.cpp:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Affected versions

Other

b2715

b2716

b2717

b2724

b2727

b2728

b2729

b2730

b2731

b2734

b2735

b2736

b2737

b2740

b2746

b2747

b2748

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-32878.json"