You need to agree to share your contact information to access this model

This repository is publicly accessible, but you have to accept the conditions to access its files and content.

Log in or Sign Up to review the conditions and access this model content.

llama.cpp GGUF โ€” heap OOB write via unbounded block_count PoC (coordinated disclosure)

This repository contains a security-research proof-of-concept file, not a machine-learning model. poc_gguf_block_count_heap_oob_write.gguf is a crafted GGUF that triggers a heap out-of-bounds write during model load in llama.cpp at src/llama-hparams.cpp:11 (set_swa_pattern). It is published solely so the huntr triage team and the llama.cpp / ggml-org maintainers can reproduce the issue during coordinated disclosure.

  • Impact: Heap out-of-bounds write on model load (memory corruption / DoS). Written values are constrained to 0/1. CVSS 4.0: 7.0 (High).
  • Affected: llama.cpp master @ 00fa7cb284cbf133fc426733bd64238a3588a33e and current master (guard still absent as of this writing).
  • Trigger: load the file with any libllama consumer, e.g. llama-cli -m poc_gguf_block_count_heap_oob_write.gguf -p x -n 1. Build with -DLLAMA_SANITIZE_ADDRESS=ON to see the ASAN report.
  • Inert otherwise โ€” the payload is plain GGUF metadata/bytes; it executes no code and only affects a process that deliberately parses it with a vulnerable llama.cpp.

Files

File Purpose
poc_gguf_block_count_heap_oob_write.gguf Crafted GGUF (gemma2 arch, block_count=100000) that reaches the set_swa_pattern OOB write
Downloads last month
5
GGUF
Model size
0 params
Architecture
gemma2
Hardware compatibility
Log In to add your hardware

We're not able to determine the quantization variants.

Inference Providers NEW
This model isn't deployed by any Inference Provider. ๐Ÿ™‹ Ask for provider support