YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
GGML legacy loader โ n_dims stack out-of-bounds write (PoC model file)
Security proof-of-concept for a stack-buffer-overflow WRITE triggered when a
GGML legacy-format model file declares an out-of-range tensor n_dims.
evil-ggml.bin(61 bytes): validggmlmagic + a minimal header, one tensor record whosen_dimsfield is set to 3.- Affected reference loader:
ggml-org/ggml,examples/gpt-2,gpt2_model_loadโ thefin.read(&ne[i], 4)call inside thefor (i = 0; i < n_dims; ++i)loop writes past the 2-element stack arrayint32_t ne[2]. - Observed effect: AddressSanitizer reports
stack-buffer-overflow,WRITE of size 4, top application framegpt2_model_load.
This artifact exists only to demonstrate the parsing flaw to maintainers and the huntr Model File Vulnerability track. It contains no real model weights.
Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐ Ask for provider support