ひてん@ten_niarazu
llama.cpp（2件） CVE-2024-58400（4.0 8.8 / 3.1 8.2、/completion への未検証トークン ID による範囲外読み取り、未認証リモート、修正版 b3701） CVE-2026-116816（4.0 8.5 / 3.1 7.8、Plamo2 トークナイザのヒープ範囲外書き込み、細工した GGUF モデル、修正版 b10261）
0000028
141 followersView on X
CVE-2024-58400
LOWCVSS 8.8 · HIGHSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
0.0/ 10 priority
Sources & remediation
Other references
- https://github.com/ggml-org/llama.cpp/blob/b3681/examples/server/server.cpp#L789
- https://github.com/ggml-org/llama.cpp/commit/eae597182cb61bbde0b26e7cec5999d28b9327fe
- https://github.com/ggml-org/llama.cpp/commit/faf69d4237c9ae4d7f572b4674d1002463e8acd3
- https://github.com/ggml-org/llama.cpp/pull/9359
- https://github.com/ggml-org/llama.cpp/releases/tag/b3701
Weakness type (CWE)
CWE-129
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day