Integer Overflow in ggml_row_size() Bypassing All GGUF Validation
PoC for integer overflow in llama.cpp tensor size calculation.
Files
poc_tensor_overflow.gguf- Crafted GGUF modelpoc_tensor_overflow.py- Generator scripttest_tensor_overflow.c- C test harness
Disclaimer
For security research and responsible disclosure only.