CVE-2024-41130(ggml / llama.cpp)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.

ggml CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

Weakness type (CWE)

CWE-476

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

llama.cpp

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

ggml

Products

llama.cpp

Deep dive

Activity timeline1 mentions / 1d

Referenced assets1 URL

By indicator

https://sh3llc0d3.com/blog/llamacpp-heap-buffer-overflow-rce-dissecting-vulnerabilities-in-gguf-ai-model-parsing-cve-2024-41130/

Full discourse1 post

SHELLCODE@sh3ll_c0d315h
🧠 LLAMA.CPP HEAP OVERFLOW RCE (CVE-2024-41130)! Critical integer overflow in llama.cpp allows remote code execution when loading weaponized GGUF AI model weights into memory. 👉 Full analysis: https://sh3llc0d3.com/blog/llamacpp-heap-buffer-overflow-rce-dissecting-vulnerabilities-in-gguf-ai-model-parsing-cve-2024-41130/ #sh3llc0d3 #shellcode #AISecurity #Vulnerability #RCE
100006
114 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	ggml	llama.cpp	-	-	-

Explore more

Back to dashboard ggml CVEs llama.cpp vulnerabilities