An integer overflow exists in the `gguf init from reader()` function. This allows attackers to bypass tensor element-count validation by providing shapes with a product that wraps to zero. By crafting GGUF files with enormous tensor extents, attackers can cause `ggml nbytes()` and strides to overflow, leading to out-of-bounds memory access when buffers are sized based on the wrapped byte counts.