OSV-2024-1090
UNKNOWN READ in ggml_free
No scoreFix available
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538517
Crash type: UNKNOWN READ
Crash state:
ggml_free
llama_model::~llama_model
llama_load_model_from_file
What each source reports
OSV No score
UNKNOWN READ in ggml_free
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42538517
Crash type: UNKNOWN READ
Crash state:
ggml_free
llama_model::~llama_model
llama_load_model_from_file
- Record
OSV-2024-1090- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
llamacppOSS-Fuzz |
Listed versions, plus commit ranges b3752b3753b3754b3755b3756 Show 45 moreShow lessb3759b3760b3761b3763b3764b3765b3766b3767b3770b3771b3772b3774b3775b3777b3778b3779b3781b3782b3783b3785b3786b3787b3788b3789b3790b3795b3797b3798b3799b3800b3801b3802b3803b3804b3805b3806b3807b3808b3811b3812b3813b3814b3816b3817b3818 |
None known |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
OSV-2024-1090 is a vulnerability with no CVSS score yet in llamacpp, published September 19, 2024. No source lists public exploit code. A source reports a fix.
References
This page doesn't list everything
Left out here: 115 versions. The JSON record has them.