llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in ggufinitfrom_file. This vulnerability is fixed in b3427.
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "file": "ggml/src/ggml.c" }, "signature_type": "Line", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "line_hashes": [ "285355735137946415233274111637779451538", "338519380378074918297981401055639380330", "248289916708048410664272387530942621569", "213236231446512886086979173619993256811" ], "threshold": 0.9 }, "id": "CVE-2024-41130-0974730f" }, { "signature_version": "v1", "target": { "file": "examples/gguf/gguf.cpp" }, "signature_type": "Line", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "line_hashes": [ "75455083495456928632793675859924131762", "39896523617899817126332115199327428702", "143269805373850216847288672640445004100" ], "threshold": 0.9 }, "id": "CVE-2024-41130-72f53f0b" }, { "signature_version": "v1", "target": { "function": "gguf_init_from_file", "file": "ggml/src/ggml.c" }, "signature_type": "Function", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "length": 9191.0, "function_hash": "165541594129766834691637382260415705873" }, "id": "CVE-2024-41130-89dcc102" }, { "signature_version": "v1", "target": { "function": "gguf_ex_read_0", "file": "examples/gguf/gguf.cpp" }, "signature_type": "Function", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "length": 1264.0, "function_hash": "158147511171561119862384808117229848452" }, "id": "CVE-2024-41130-dfcd355d" } ] }
{ "vanir_signatures": [ { "signature_version": "v1", "target": { "function": "gguf_init_from_file", "file": "ggml/src/ggml.c" }, "signature_type": "Function", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "length": 9191.0, "function_hash": "165541594129766834691637382260415705873" }, "id": "CVE-2024-41130-0c037f02" }, { "signature_version": "v1", "target": { "function": "gguf_ex_read_0", "file": "examples/gguf/gguf.cpp" }, "signature_type": "Function", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "length": 1264.0, "function_hash": "158147511171561119862384808117229848452" }, "id": "CVE-2024-41130-32205301" }, { "signature_version": "v1", "target": { "file": "examples/gguf/gguf.cpp" }, "signature_type": "Line", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "line_hashes": [ "75455083495456928632793675859924131762", "39896523617899817126332115199327428702", "143269805373850216847288672640445004100" ], "threshold": 0.9 }, "id": "CVE-2024-41130-7b4b04d1" }, { "signature_version": "v1", "target": { "file": "ggml/src/ggml.c" }, "signature_type": "Line", "source": "https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252", "deprecated": false, "digest": { "line_hashes": [ "285355735137946415233274111637779451538", "338519380378074918297981401055639380330", "248289916708048410664272387530942621569", "213236231446512886086979173619993256811" ], "threshold": 0.9 }, "id": "CVE-2024-41130-85c2c9b4" } ] }