OOB Access via Unvalidated Default Special Token IDs
PoC for out-of-bounds access in llama.cpp tokenizer loading.
Files
poc_special_token_oob.gguf - Crafted GGUF model
poc_special_token_oob.py - Generator script
Disclaimer
For security research and responsible disclosure only.