Target: ggml-org/llama.cppFile: ggml/src/gguf.cpp line 681Severity: CVSS 5.3–6.5 (Medium)Platform: x86_64 only (SIGFPE trap)
A crafted GGUF file with a tensor dimension of zero (ne[1] = 0) causes a division-by-zero in gguf.cpp at line 681:
INT64_MAX / info.t.ne[1] // crashes when ne[1] == 0
The validation at line 672 only rejects negative dimensions (ne[j] < 0), allowing zero to pass through.… See the full description on the dataset page:
https://huggingface.co/datasets/wulonchia/llama-cpp-gguf-divzero-dos-poc.
