llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in ggufinitfrom_file. This vulnerability is fixed in b3427.
{
"cwe_ids": [
"CWE-476"
]
}[
{
"digest": {
"line_hashes": [
"285355735137946415233274111637779451538",
"338519380378074918297981401055639380330",
"248289916708048410664272387530942621569",
"213236231446512886086979173619993256811"
],
"threshold": 0.9
},
"target": {
"file": "ggml/src/ggml.c"
},
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"id": "CVE-2024-41130-0974730f",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"digest": {
"line_hashes": [
"75455083495456928632793675859924131762",
"39896523617899817126332115199327428702",
"143269805373850216847288672640445004100"
],
"threshold": 0.9
},
"target": {
"file": "examples/gguf/gguf.cpp"
},
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"id": "CVE-2024-41130-72f53f0b",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Line"
},
{
"digest": {
"length": 9191.0,
"function_hash": "165541594129766834691637382260415705873"
},
"target": {
"file": "ggml/src/ggml.c",
"function": "gguf_init_from_file"
},
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"id": "CVE-2024-41130-89dcc102",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
},
{
"digest": {
"length": 1264.0,
"function_hash": "158147511171561119862384808117229848452"
},
"target": {
"file": "examples/gguf/gguf.cpp",
"function": "gguf_ex_read_0"
},
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"id": "CVE-2024-41130-dfcd355d",
"signature_version": "v1",
"deprecated": false,
"signature_type": "Function"
}
]