Heap Buffer Over-Read via strlen() on Unterminated Precompiled Charsmap
PoC for heap buffer over-read in llama.cpp UGM (T5) tokenizer.
Files
poc_strlen_oob.gguf - Crafted GGUF model
poc_strlen_oob.py - Generator script
Disclaimer
For security research and responsible disclosure only.