Skip to content
Threat Feed
Subscribe

Vendor

Llama.cpp

1 brief RSS
critical advisory

llama.cpp Integer Overflow Vulnerability Leading to Potential RCE

A heap-based buffer overflow vulnerability exists in llama.cpp due to an integer overflow in the `ggml_nbytes` function, allowing attackers to potentially achieve Remote Code Execution (RCE) by crafting malicious GGUF files.

llama.cpp integer_overflow rce heap_overflow
2r 1t