Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 19:10:25 +0000 CVE-2024-58400 — llama.cpp before b3701 Out-of-Bounds Read in llama_decode via Token IDs https://db.gcve.eu/vuln/cve-2024-58400 <p><strong>Affected:</strong> ggml-org llama.cpp</p> <p>llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.</p> <p><strong>Affected:</strong> ggml-org llama.cpp</p> <p>llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.</p> https://db.gcve.eu/vuln/cve-2024-58400