CVE-2024-10225

Name of the Vulnerable Software and Affected Versions haotian-liu/llava version 1.2.0

Description A Denial of Service (DoS) issue allows an attacker to cause the server to become inaccessible by appending a large number of characters to the end of a multipart boundary in a file upload request, causing the server to continuously process each character.

Recommendations For haotian-liu/llava version 1.2.0, consider restricting the size of file upload requests or validating the multipart boundary to prevent excessive character appending until a patch is available.