You can deploy this model and start earning money today!

Rammadaeus/
poc-gguf-vocab-oob-read

Name: poc-gguf-vocab-oob-read
Availability: InStock

gguf

Views

No views yet

PoC: GGUF Heap OOB Read in Vocab Loading

Format: GGUF Target: llama.cpp (ggml-org/llama.cpp) CWE: CWE-125 (Out-of-bounds Read)

Vulnerability

Heap-buffer-overflow read in llama_vocab::impl::load() when loading GGUF with mismatched scores/token array sizes. 100 tokens but 1 score entry → 396-byte heap overread.

Reproduction

bash

git clone https://github.com/ggml-org/llama.cpp && cd llama.cpp
mkdir build && cd build
cmake .. -DCMAKE_BUILD_TYPE=Debug \
  -DCMAKE_C_FLAGS="-fsanitize=address -fno-omit-frame-pointer" \
  -DCMAKE_CXX_FLAGS="-fsanitize=address -fno-omit-frame-pointer"
cmake --build . --target llama-tokenize -j$(nproc)
./bin/llama-tokenize -m ../poc_vocab_scores_oob.gguf -p "hello"

ASAN reports: heap-buffer-overflow READ at llama-vocab.cpp:2145

Tested: llama.cpp commit 2b089c7 (tag b8083)

Rammadaeus/poc-gguf-vocab-oob-read

PoC: GGUF Heap OOB Read in Vocab Loading

Vulnerability

Reproduction

Rammadaeus/
poc-gguf-vocab-oob-read