CVSS 3.1 Score 8.8 of 10 (high)


Published Feb 26, 2024
CWE ID 190


CVE-2024-23605 is a heap-based buffer overflow vulnerability in the GGUF library header.n_kv functionality of llama.cpp Commit 18c2e17. This vulnerability can be exploited by providing a specially crafted .gguf file, which can lead to code execution. The vulnerability has a base severity rating of HIGH and a base score of 8.8 according to the CVSS version 3.1 scoring system. It requires network access and user interaction to exploit, with high impacts on both integrity and confidentiality. The vulnerability affects the affected product(s) using the vulnerable library and version. No remediation information or potential danger to organizations is provided in the available text.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23605 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options