Slaren

An out-of-bounds read exists in the `llama model loader()` function. This occurs when the software processes a crafted or truncated GGUF model file containing arbitrary 64-bit tensor offsets. An attacker can exploit this to read memory outside the mapped model file, potentially causing the process to crash or allowing adjacent process memory to be loaded as model weights.

An out-of-bounds read exists in the `llama decode internal()` and `llama encode internal()` functions. Remote unauthenticated attackers can read memory or cause a process crash by providing unvalidated token IDs. This is achieved by sending integer-array prompts to the `/completion` endpoint with IDs that fall outside the 0 to `n vocab` range, allowing access to embedding memory outside the intended boundaries.