llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in ggufinitfrom_file. This vulnerability is fixed in b3427.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-476"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41130.json"
}[
{
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"target": {
"file": "ggml/src/ggml.c"
},
"id": "CVE-2024-41130-0974730f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"285355735137946415233274111637779451538",
"338519380378074918297981401055639380330",
"248289916708048410664272387530942621569",
"213236231446512886086979173619993256811"
]
}
},
{
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"target": {
"file": "examples/gguf/gguf.cpp"
},
"id": "CVE-2024-41130-72f53f0b",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"75455083495456928632793675859924131762",
"39896523617899817126332115199327428702",
"143269805373850216847288672640445004100"
]
}
},
{
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"target": {
"function": "gguf_init_from_file",
"file": "ggml/src/ggml.c"
},
"id": "CVE-2024-41130-89dcc102",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "165541594129766834691637382260415705873",
"length": 9191.0
}
},
{
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"target": {
"function": "gguf_ex_read_0",
"file": "examples/gguf/gguf.cpp"
},
"id": "CVE-2024-41130-dfcd355d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"digest": {
"function_hash": "158147511171561119862384808117229848452",
"length": 1264.0
}
}
]