thawndev's picture
Strip README to minimal — detailed vuln info removed from public view
0cc026a verified
---
license: mit
tags:
- security
- poc
- gguf
- llama-cpp
---
# PoC: Out-of-Bounds Memory Access in llama.cpp EOG Token Processing
Security research PoC for a vulnerability in llama.cpp GGUF vocabulary loading.
**Affected software:** llama.cpp (all versions up to current master)
**Bug class:** Out-of-bounds read/write (CWE-125 / CWE-787)
**Impact:** Memory corruption, information leak, denial of service
The PoC file (`poc_eog_oob.gguf`) demonstrates this issue. Access is gated — requests are reviewed before granting download access.