YAML Metadata Warning:empty or missing yaml metadata in repo card
Check out the documentation for more information.
Llamafile ZIP Parser Crash PoC
CRASH-VULN-01: Local File Header Offset Overflow β SIGBUS
A crafted .llamafile ZIP container with inflated namesize and extrasize
fields in the local file header causes an unchecked offset overflow in
llamafile_open_zip(), leading to an immediate SIGBUS crash.
Reproduce
llamafile --cli -m poc_lfile_offset.llamafile --prompt "test"
# Exit code 138 (SIGBUS)
Files
poc_lfile_offset.llamafileβ PoC file (132 bytes), crashes llamafile v0.10.0poc_lfile_offset.pyβ Generator scriptpoc_size_overflow.llamafileβ Secondary PoC (integer sign confusion)poc_size_overflow.pyβ Generator script
Affected
llamafile v0.10.0 and all prior versions.
- Downloads last month
- -
Inference Providers NEW
This model isn't deployed by any Inference Provider. π Ask for provider support