llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in ggufinitfrom_file. This vulnerability is fixed in b3427.
{
"cna_assigner": "GitHub_M",
"cwe_ids": [
"CWE-476"
],
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41130.json"
}"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41130.json"
[
{
"digest": {
"line_hashes": [
"285355735137946415233274111637779451538",
"338519380378074918297981401055639380330",
"248289916708048410664272387530942621569",
"213236231446512886086979173619993256811"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "ggml/src/ggml.c"
},
"signature_type": "Line",
"id": "CVE-2024-41130-0974730f",
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"75455083495456928632793675859924131762",
"39896523617899817126332115199327428702",
"143269805373850216847288672640445004100"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "examples/gguf/gguf.cpp"
},
"signature_type": "Line",
"id": "CVE-2024-41130-72f53f0b",
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
},
{
"digest": {
"function_hash": "165541594129766834691637382260415705873",
"length": 9191.0
},
"signature_version": "v1",
"target": {
"file": "ggml/src/ggml.c",
"function": "gguf_init_from_file"
},
"signature_type": "Function",
"id": "CVE-2024-41130-89dcc102",
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
},
{
"digest": {
"function_hash": "158147511171561119862384808117229848452",
"length": 1264.0
},
"signature_version": "v1",
"target": {
"file": "examples/gguf/gguf.cpp",
"function": "gguf_ex_read_0"
},
"signature_type": "Function",
"id": "CVE-2024-41130-dfcd355d",
"source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
}
]
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-41130.json"
[
{
"digest": {
"function_hash": "158147511171561119862384808117229848452",
"length": 1264.0
},
"signature_version": "v1",
"target": {
"file": "examples/gguf/gguf.cpp",
"function": "gguf_ex_read_0"
},
"signature_type": "Function",
"id": "CVE-2024-41130-0b9e495a",
"source": "https://github.com/ggml-org/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"75455083495456928632793675859924131762",
"39896523617899817126332115199327428702",
"143269805373850216847288672640445004100"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "examples/gguf/gguf.cpp"
},
"signature_type": "Line",
"id": "CVE-2024-41130-81e5bb69",
"source": "https://github.com/ggml-org/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
},
{
"digest": {
"function_hash": "165541594129766834691637382260415705873",
"length": 9191.0
},
"signature_version": "v1",
"target": {
"file": "ggml/src/ggml.c",
"function": "gguf_init_from_file"
},
"signature_type": "Function",
"id": "CVE-2024-41130-a6f1bed9",
"source": "https://github.com/ggml-org/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
},
{
"digest": {
"line_hashes": [
"285355735137946415233274111637779451538",
"338519380378074918297981401055639380330",
"248289916708048410664272387530942621569",
"213236231446512886086979173619993256811"
],
"threshold": 0.9
},
"signature_version": "v1",
"target": {
"file": "ggml/src/ggml.c"
},
"signature_type": "Line",
"id": "CVE-2024-41130-b11f1acf",
"source": "https://github.com/ggml-org/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252",
"deprecated": false
}
]