Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-10225

Denial of Service in haotian-liu/llava

Description

A vulnerability in haotian-liu/llava v1.2.0 allows an attacker to cause a Denial of Service (DoS) by appending a large number of characters to the end of a multipart boundary in a file upload request. This causes the server to continuously process each character, rendering the application inaccessible.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

haotian-liu haotian-liu/llava

  • unspecified to ≤ latestaffected

References