Description
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ggml-org llama.cpp
Default version status: unaffected
b5899 to < b10261affected
pkg:github/ggml-org/llama.cppReferences
- https://github.com/ggml-org/llama.cpp/pull/25969 ↗
- https://github.com/ggml-org/llama.cpp/pull/26511 ↗
- https://github.com/ggml-org/llama.cpp/commit/cf06ad7dfe79e7bf2934150d4fefe1ce8db05490 ↗
- https://github.com/ggml-org/llama.cpp/blob/b10259/src/llama-vocab.cpp#L1376-L1377 ↗
- https://github.com/ggml-org/llama.cpp/releases/tag/b10261 ↗
- https://www.vulncheck.com/advisories/llama-cpp-b5899-before-b10261-heap-out-of-bounds-write-via-plamo2-tokenizer ↗