Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 743 | 0,2 % |
| ≥50 % | 3.224 | 0,8 % |
| ≥10 % | 22.074 | 5,8 % |
| <10 % | 354.688 | 93,2 % |
CVE-2026-98432 Linux kernel IPv4 TCP flaw: status for CloudLinux
📋 TL;DR — last updated October 30, 2026, 16:20 UTC CVE-2026-98432 (CVSS 9.8, Critical per Red Hat) is a use-after-free flaw in the Linux kernel’s IPv4 TCP code that a remote attacker can reach without an account on the server. Exploiting it
CVE-2024-56583 | Linux Kernel up to 6.6.65/6.12.4 migrate_enable privilege escalation (Nessus ID 230822 / WID-SEC-2024-3762)
A vulnerability categorized as problematic has been discovered in Linux Kernel up to 6.6.65/6.12.4. The affected element is the function migrate_enable. Executing a manipulation can lead to privilege escalation. This vulnerability is regist
CVE-2024-53216 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 nfsd use after free (Nessus ID 214250 / WID-SEC-2024-3762)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.63/6.11.10/6.12.1. Affected by this vulnerability is an unknown functionality of the component nfsd. Executing a manipulation can lead to use after free. This vuln
CVE-2024-53179 | Linux Kernel up to 6.12.1 SMB Client cifs_mount use after free (Nessus ID 214250 / WID-SEC-2024-3762)
A vulnerability classified as critical was found in Linux Kernel up to 6.12.1. Affected by this issue is the function cifs_mount of the component SMB Client. The manipulation results in use after free. This vulnerability is reported as CVE-
CVE-2024-53178 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 smb open_cached_dir reference count (Nessus ID 216493 / WID-SEC-2024-3762)
A vulnerability marked as problematic has been reported in Linux Kernel up to 6.6.63/6.11.10/6.12.1. The affected element is the function open_cached_dir of the component smb. This manipulation causes improper update of reference count. Thi
CVE-2024-53177 | Linux Kernel up to 6.6.63/6.11.10/6.12.1 smb open_cached_dir use after free (Nessus ID 216460 / WID-SEC-2025-1439)
A vulnerability classified as critical was found in Linux Kernel up to 6.6.63/6.11.10/6.12.1. This impacts the function open_cached_dir of the component smb. Executing a manipulation can lead to use after free. This vulnerability appears as
CVE-2024-53094 | Linux Kernel up to 6.6.61/6.11.8 RDMA sendpage_ok stack-based overflow (3406bfc813a9/bb5738957d92/4e1e3dd88a4c / Nessus ID 216493)
A vulnerability was found in Linux Kernel up to 6.6.61/6.11.8 and classified as critical. This affects the function sendpage_ok of the component RDMA. Such manipulation leads to stack-based buffer overflow. This vulnerability is documented
CVE-2024-53091 | Linux Kernel up to 6.6.61/6.11.8 bpf tls_sw_ctx_rx memory corruption (a078a480ff3f/6781cfa93a6a/44d0469f79bd / Nessus ID 214901)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.61/6.11.8. Affected by this vulnerability is the function tls_sw_ctx_rx of the component bpf. The manipulation results in memory corruption. This vulnera
CVE-2024-53068 | Linux Kernel up to 6.6.60/6.11.7 scmi_bus_notifier use after free (15b17bbcea07/1e1f523b185a/295416091e44 / Nessus ID 213014)
A vulnerability was found in Linux Kernel up to 6.6.60/6.11.7 and classified as critical. This vulnerability affects the function scmi_bus_notifier. Executing a manipulation can lead to use after free. This vulnerability is registered as CV
CVE-2024-50285 | Linux Kernel up to 6.6.60/6.11.7 ksmbd race condition (1f993777275c/e257ac6fe138/0a77d947f599 / Nessus ID 216493)
A vulnerability was found in Linux Kernel up to 6.6.60/6.11.7. It has been rated as problematic. Impacted is an unknown function of the component ksmbd. This manipulation causes race condition. This vulnerability appears as CVE-2024-50285.
CVE-2024-49926 | Linux Kernel up to 6.10.13/6.11.2 rcu-tasks rcu_tasks_need_gpcb memory corruption (3104bddc666f/05095271a4fb/fd70e9f1d85f / Nessus ID 214608)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.10.13/6.11.2. The affected element is the function rcu_tasks_need_gpcb of the component rcu-tasks. The manipulation leads to memory corruption. This v
CVE-2024-47752 | Linux Kernel up to 6.6.53/6.10.12/6.11.1 vcodec vdec_h264_req_if.c null pointer dereference (Nessus ID 210940 / WID-SEC-2024-3251)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.53/6.10.12/6.11.1. This vulnerability affects unknown code of the file vdec_h264_req_if.c of the component vcodec. Such manipulation leads to null pointe
CVE-2024-47658 | Linux Kernel up to 6.6.49/6.10.8 stm32 recursion (d93a2f86b0a9/5d734665cd5d/56ddb9aa3b32 / Nessus ID 210940)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.49/6.10.8. This vulnerability affects unknown code of the component stm32. Such manipulation leads to uncontrolled recursion. This vulnerability is traded
CVE-2024-46813 | Linux Kernel up to 6.10.8 AMD Display link_index out-of-bounds (ac04759b4a00/8aa2864044b9 / Nessus ID 210933)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.10.8. Affected by this vulnerability is an unknown functionality of the component AMD Display. Performing a manipulation of the argument link_index re
CVE-2024-46811 | Linux Kernel up to 6.6.49/6.10.8 AMD Display fpu_update_bw_bounding_box assertion (4003bac78438/aba188d6f4eb/188fd1616ec4 / Nessus ID 210933)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.49/6.10.8. This affects the function fpu_update_bw_bounding_box of the component AMD Display. The manipulation leads to reachable assertion. This vulnerabili
CVE-2024-44942 | Linux Kernel up to 6.6.46/6.10.5 fs/f2fs/inline.c f2fs_bug_on information disclosure (ae00e6536a2d/26c07775fb5d/fc01008c92f4 / Nessus ID 211624)
A vulnerability classified as problematic has been found in Linux Kernel up to 6.6.46/6.10.5. The impacted element is the function f2fs_bug_on of the file fs/f2fs/inline.c. Performing a manipulation results in information disclosure. This v
CVE-2024-43913 | Linux Kernel up to 6.10.4 nvme_uninit_ctrl reference count (d59c4d0eb6ad/b9ecbfa45516 / Nessus ID 212724)
A vulnerability was found in Linux Kernel up to 6.10.4. It has been classified as problematic. The impacted element is the function nvme_uninit_ctrl. The manipulation leads to improper update of reference count. This vulnerability is unique
CVE-2024-43872 | Linux Kernel up to 6.10.2 RDMA denial of service (06580b33c183/2fdf34038369 / Nessus ID 212625)
A vulnerability was found in Linux Kernel up to 6.10.2. It has been classified as problematic. The impacted element is an unknown function of the component RDMA. The manipulation leads to denial of service. This vulnerability is referenced
CVE-2024-42243 | Linux Kernel up to 6.6.40/6.9.9 lib/xarray.c allocation of resources (a0c42ddd0969/333c5539a31f/099d90642a71 / Nessus ID 208423)
A vulnerability was found in Linux Kernel up to 6.6.40/6.9.9 and classified as problematic. Impacted is an unknown function in the library lib/xarray.c. Such manipulation leads to allocation of resources. This vulnerability is uniquely iden
CVE-2024-42158 | Linux Kernel up to 6.9.8 s390 kfree_sensitive resource transfer (62151a0acde9/22e6824622e8 / Nessus ID 207884)
A vulnerability was found in Linux Kernel up to 6.9.8. It has been declared as problematic. This issue affects the function kfree_sensitive of the component s390. The manipulation results in incorrect resource transfer. This vulnerability i
CVE-2024-41048 | Linux Kernel up to 5.15.162/6.1.99/6.6.40/6.9.9 skmsg /test_progs page_address null pointer dereference (Nessus ID 207738 / WID-SEC-2024-1722)
A vulnerability labeled as critical has been found in Linux Kernel up to 5.15.162/6.1.99/6.6.40/6.9.9. This issue affects the function page_address of the file /test_progs of the component skmsg. Executing a manipulation can lead to null po
CVE-2024-40909 | Linux Kernel up to 6.6.34/6.9.5 bpf_link_free use after free (91cff53136da/fa97b8fed989/2884dc7d08d9 / Nessus ID 207909)
A vulnerability classified as critical was found in Linux Kernel up to 6.6.34/6.9.5. Affected is the function bpf_link_free. Such manipulation leads to use after free. This vulnerability is uniquely identified as CVE-2024-40909. The attack
CVE-2024-38625 | Linux Kernel up to 6.6.32/6.9.3 ntfs3 null pointer dereference (6c8054d59066/ff1068929459/1cd6c96219c4)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.32/6.9.3. This affects an unknown function of the component ntfs3. Performing a manipulation results in null pointer dereference. This vulnerability was named CV
CVE-2024-38570 | Linux Kernel up to 6.6.32/6.8.11/6.9.2 gfs2 sd_dead_glocks use after free (Nessus ID 207818 / WID-SEC-2024-1418)
A vulnerability identified as critical has been detected in Linux Kernel up to 6.6.32/6.8.11/6.9.2. This vulnerability affects the function sd_dead_glocks of the component gfs2. Performing a manipulation results in use after free. This vuln
CVE-2024-36968 | Linux Kernel up to 6.6.31/6.8.10/6.9.1 Bluetooth l2cap_le_flowctl_init buffer overflow (Nessus ID 212722)
A vulnerability labeled as critical has been found in Linux Kernel up to 6.6.31/6.8.10/6.9.1. Affected by this issue is the function l2cap_le_flowctl_init of the component Bluetooth. Executing a manipulation can lead to buffer overflow. Thi
CVE-2024-36881 | Linux Kernel up to 6.6.30/6.8.9 userfaultfd close memory corruption (377f3a9a3d03/8d8b68a5b0c9/c88033efe9a3 / WID-SEC-2024-1259)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.30/6.8.9. Affected is the function close of the component userfaultfd. This manipulation causes memory corruption. This vulnerability is tracked as
CVE-2024-27041 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 amdgpu_dm_fini null pointer dereference (WID-SEC-2024-1008)
A vulnerability marked as critical has been reported in Linux Kernel up to 6.6.22/6.7.10/6.8.1. This affects the function amdgpu_dm_fini. The manipulation leads to null pointer dereference. This vulnerability is documented as CVE-2024-27041
CVE-2023-52653 | Linux Kernel up to 6.6.22/6.7.10/6.8.1 SUNRPC gss_import_v2_context memory leak (Nessus ID 209785 / WID-SEC-2024-1008)
A vulnerability was found in Linux Kernel up to 6.6.22/6.7.10/6.8.1 and classified as critical. This vulnerability affects the function gss_import_v2_context of the component SUNRPC. Executing a manipulation can lead to memory leak. This vu
CVE-2026-95280 | Google Chrome up to 153.0.8010.52 V8 race condition (WID-SEC-2026-3514)
A vulnerability was found in Google Chrome. It has been declared as critical. The impacted element is an unknown function of the component V8. Executing a manipulation can lead to race condition. This vulnerability is registered as CVE-2026
CVE-2026-95279 | Google Chrome up to 153.0.8010.52 Omnibox clickjacking (WID-SEC-2026-3514)
A vulnerability labeled as problematic has been found in Google Chrome. Impacted is an unknown function of the component Omnibox. Executing a manipulation can lead to clickjacking. This vulnerability is handled as CVE-2026-95279. The attack
CVE-2026-95278 | Google Chrome up to 153.0.8010.52 WakeLock authorization (WID-SEC-2026-3514)
A vulnerability was found in Google Chrome. It has been rated as critical. This affects an unknown function of the component WakeLock. The manipulation leads to missing authorization. This vulnerability is documented as CVE-2026-95278. The
CVE-2026-95277 | Google Chrome up to 153.0.8010.52 Views use after free (WID-SEC-2026-3514)
A vulnerability was found in Google Chrome and classified as critical. Impacted is an unknown function of the component Views. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-95277. The attack may be perf
CVE-2026-95276 | Google Chrome up to 153.0.8010.52 Themes input validation (WID-SEC-2026-3514)
A vulnerability has been found in Google Chrome and classified as critical. This issue affects some unknown processing of the component Themes. This manipulation causes improper input validation. This vulnerability is tracked as CVE-2026-95
CVE-2026-95275 | Google Chrome up to 153.0.8010.52 MediaStream privileges management (WID-SEC-2026-3514)
A vulnerability was found in Google Chrome. It has been classified as critical. The affected element is an unknown function of the component MediaStream. Performing a manipulation results in improper privilege management. This vulnerability
CVE-2026-95274 | Google Chrome up to 153.0.8010.52 DevTools cross site scripting (WID-SEC-2026-3514)
A vulnerability, which was classified as problematic, was found in Google Chrome. This vulnerability affects unknown code of the component DevTools. The manipulation results in cross site scripting. This vulnerability is identified as CVE-2
„SMS des Todes“: Sicherheitslücke lässt Android-Smartphones abstürzen
Eine unsichtbare SMS lässt Android-Smartphones abstürzen, unterbricht Anrufe und hält Geräte in einer Reboot-Schleife gefangen. Google hat bereits reagiert. Weiterlesen
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) , a ca
CVE-2024-26902 | Linux Kernel up to 6.6.22/6.7.10 RISCV null pointer dereference (3ede8e94de6b/9f599ba3b9cc/34b567868777 / Nessus ID 227930)
A vulnerability categorized as critical has been discovered in Linux Kernel up to 6.6.22/6.7.10. The impacted element is an unknown function of the component RISCV. Such manipulation leads to null pointer dereference. This vulnerability is
CVE-2024-26889 | Linux Kernel up to 6.8.1 hci_core buffer overflow (Nessus ID 210815)
A vulnerability was found in Linux Kernel up to 6.8.1. It has been classified as critical. This issue affects some unknown processing of the component hci_core. The manipulation leads to buffer overflow. This vulnerability is uniquely ident
CVE-2024-26841 | Linux Kernel up to 6.6.18/6.7.6 on SMT kernel/jump_label.c clear_cpu_sibling_map stack-based overflow (b1ec3d6b86fd/0d862db64d26/752cd08da320)
A vulnerability, which was classified as critical, was found in Linux Kernel up to 6.6.18/6.7.6 on SMT. Affected by this vulnerability is the function clear_cpu_sibling_map of the file kernel/jump_label.c. The manipulation results in stack-
CVE-2024-26662 | Linux Kernel up to 6.6.16/6.7.4 Display dcn21_set_backlight_level null pointer dereference (2e150ccea131/0c863cab0e91/e96fddb32931 / Nessus ID 210815)
A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.6.16/6.7.4. This vulnerability affects the function dcn21_set_backlight_level of the component Display. Performing a manipulation results in null poin
CVE-2024-26661 | Linux Kernel up to 6.6.16/6.7.4 Display dcn21_set_pipe null pointer dereference (3f3c237a7065/39f24c08363a/66951d98d9bf / Nessus ID 210741)
A vulnerability classified as critical was found in Linux Kernel up to 6.6.16/6.7.4. This affects the function dcn21_set_pipe of the component Display. Such manipulation leads to null pointer dereference. This vulnerability is documented as
CVE-2023-52591 | Linux Kernel up to 6.6.15/6.7.3 ReiserFS privilege escalation (17e1361cb91d/c04c162f82ac/49db9b1b86a8 / Nessus ID 240010)
A vulnerability identified as problematic has been detected in Linux Kernel up to 6.6.15/6.7.3. This affects an unknown part of the component ReiserFS. Performing a manipulation results in privilege escalation. This vulnerability was named
CVE-2023-52452 | Linux Kernel up to 5.12/6.6.13/6.7.1 BPF check_stack_slot_within_bounds uninitialized pointer (6b4a64bafd10/0954982db828/fbcf372c8eda)
A vulnerability has been found in Linux Kernel up to 5.12/6.6.13/6.7.1 and classified as problematic. Affected by this vulnerability is the function check_stack_slot_within_bounds of the component BPF. This manipulation causes uninitialized
Critical Drupal Commerce Vulnerability Could Let Hackers Buy Products for Just $0.01
Drupal has warned that hackers are actively exploiting a highly critical security flaw in Commerce Core, putting online stores at risk of financial losses. Tracked as CVE-2026-118539, the vulnerability lets attackers bypass access checks in
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short
CVE-2024-58400 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send intege
CVE-2024-58399 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF m