medium5.4
CVE-2024-41130
llama.cpp provides LLM inference in C/C++.
Impact
llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ggml | Llama.Cpp | before b3427 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252
- https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-49q7-2jmh-92fp
- https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252
- https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-49q7-2jmh-92fp