CVE-2024-41130

CVSS V2 None CVSS V3 None

Description

llama.cpp provides LLM inference in C/C++. Prior to b3427, llama.cpp contains a null pointer dereference in gguf_init_from_file. This vulnerability is fixed in b3427.

Overview

CVE ID
CVE-2024-41130

Assigner
GitHub_M

Vulnerability Status
PUBLISHED

Published Version
2024-07-22T17:28:47.708Z

Last Modified Date
2024-07-22T17:51:55.310Z

Weakness Enumerations

CWE	URL
CWE-476	http://cwe.mitre.org/data/definitions/476.html

References

Reference URL	Reference Tags
https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-49q7-2jmh-92fp	x_refsource_CONFIRM
https://github.com/ggerganov/llama.cpp/commit/07283b1a90e1320aae4762c7e03c879043910252	x_refsource_MISC

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-41130
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41130

History

Created	Old Value	New Value	Data Type	Notes
2024-07-23 13:09:19				Added to TrackCVE