thawndev's picture
Strip README to minimal — detailed vuln info removed from public view
0cc026a verified
metadata
license: mit
tags:
  - security
  - poc
  - gguf
  - llama-cpp

PoC: Out-of-Bounds Memory Access in llama.cpp EOG Token Processing

Security research PoC for a vulnerability in llama.cpp GGUF vocabulary loading.

Affected software: llama.cpp (all versions up to current master) Bug class: Out-of-bounds read/write (CWE-125 / CWE-787) Impact: Memory corruption, information leak, denial of service

The PoC file (poc_eog_oob.gguf) demonstrates this issue. Access is gated — requests are reviewed before granting download access.