M00Dy

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc server::deserialize tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be carried out remotely. The reported GitHub issue was closed automatically due to inactivity.

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 0.31.2-rc1 is capable of addressing this issue. The patch is named 67b6a1c2d45321e0cb3c04a18073f9818de7724b. It is recommended to upgrade the affected component.

A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. This vulnerability affects unknown code of the file gptqmodel/nn modules/qlinear/tritonv2.py of the component Triton dequantization kernel. Such manipulation of the argument g idx leads to out-of-bounds read. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.3.0 is able to resolve this issue. The name of the patch is 877c732f7d7dccd56a729844c6a5bd20f3aa8bb1. Upgrading the affected component is recommended.

**Name of the Vulnerable Software and Affected Versions** llama.cpp version bec4772f6 **Description** A deserialization flaw exists in the ggml-RPC Server component. A remote attacker can trigger this issue by manipulating the `op` or `op params` arguments within the `deserialize tensor()` function located in the ggml/src/ggml-rpc/ggml-rpc.cpp file. Deserialization is the process of converting a data format (like a byte stream) back into an object that the program can use. **Recommendations** As a temporary mitigation, restrict access to the ggml-RPC Server or avoid using the `deserialize tensor()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** llama.cpp version bec4772f6 **Description** A null pointer dereference can be triggered remotely within the ggml-RPC Server component. The issue resides in the `rpc server::graph compute()` function located in the ggml/src/ggml-rpc/ggml-rpc.cpp file. A null pointer dereference occurs when a program attempts to read or write to a memory address that is NULL, typically resulting in a program crash. **Recommendations** As a temporary workaround, restrict access to the `rpc server::graph compute()` function until a patch is available.

**Name of the Vulnerable Software and Affected Versions** EricLBuehler Mistral.rs versions prior to 0.8.23 **Description** A remote out-of-bounds read can occur within the GGUF Tokenizer component. The issue exists in the `convert gguf to hf tokenizer()` function located in the `mistralrs-core/src/gguf/gguf tokenizer.rs` file. This occurs when the `eos token id`, `bos token id`, or `unknown token id` arguments are manipulated. **Recommendations** Update to version 0.8.23.

**Name of the Vulnerable Software and Affected Versions** sonos tract versions prior to 0.23.5 **Description** A flaw in the ONNX Initializer Loader component allows for remote attacks. The issue resides in the `Tensor::from raw dt align()` function within the `data/src/tensor.rs` file, where improper manipulation leads to an incorrect calculation of the buffer size. **Recommendations** Apply patch 66b10bda8895f4bfaf8c205361f0125cdf51f99b to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** llama.cpp version e15efe0 **Description** An issue exists in the Jinja Minja Template Parser component within the `common/jinja/parser.cpp` file. A local attacker can trigger a reachable assertion by providing the input `{{9|9|{`. An assertion is a check used during development to ensure that a specific condition remains true; if it fails, the program typically terminates. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** whisper.cpp version 95ea8f9b **Description** A local attacker can cause a reachable assertion in the `ggml ftype to ggml type()` function within the ggml/src/ggml.c file by manipulating the `ftype` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ggml-org whisper.cpp version 1.8.4-58 **Description** A local manipulation of the `log mel spectrogram()` function within the src/whisper.cpp file can lead to an out-of-bounds read, which occurs when the software reads data outside the intended memory boundary. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** llama.cpp version e15efe0 **Description** A flaw exists in the JSON-Schema-to-GBNF Conversion component within the `transform()` function of the `common/json-schema-to-grammar.cpp` file. This issue allows a remote attacker to trigger an excessive allocation of resources. **Recommendations** As a temporary workaround, restrict the use of the `transform()` function within the JSON-Schema-to-GBNF Conversion component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ggml-org llama.cpp (affected versions not specified) **Description** A remote attack can trigger a null pointer dereference, which occurs when a program attempts to read from a memory address that is null, typically leading to a crash. This issue is located in the ` visit pattern()` function within the `common/json-schema-to-grammar.cpp` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** onnx versions prior to 1.22.0 **Description** A weakness in the onnxruntime component allows for a remote out-of-bounds read. This occurs within the `convPoolShapeInference opset19()` function located in the onnx/defs/nn/old.cc file. **Recommendations** Apply patch a7bf3a0f1d18bb62575236ef6e4944980c40e045 to resolve the issue. As a temporary mitigation, restrict the use of the `convPoolShapeInference opset19()` function.

**Name of the Vulnerable Software and Affected Versions** whisper.cpp versions prior to 1.8.3 **Description** A security flaw exists in the `whisper model load()` function within the ggml/src/ggml.c file. This issue allows for a null pointer dereference, which occurs when a program attempts to read or write to a memory location that is null, typically leading to a crash. Exploitation requires local access to the system. **Recommendations** Update to a version later than 1.8.2. As a temporary workaround, restrict access to the `whisper model load()` function to minimize the risk of exploitation.