M00Dy

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

**Name of the Vulnerable Software and Affected Versions** ggml-org llama.cpp (affected versions not specified) **Description** A remote attack can trigger a null pointer dereference, which occurs when a program attempts to read from a memory address that is null, typically leading to a crash. This issue is located in the ` visit pattern()` function within the `common/json-schema-to-grammar.cpp` file. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** llama.cpp version e15efe0 **Description** A flaw exists in the JSON-Schema-to-GBNF Conversion component within the `transform()` function of the `common/json-schema-to-grammar.cpp` file. This issue allows a remote attacker to trigger an excessive allocation of resources. **Recommendations** As a temporary workaround, restrict the use of the `transform()` function within the JSON-Schema-to-GBNF Conversion component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** ggml-org whisper.cpp version 1.8.4-58 **Description** A local manipulation of the `log mel spectrogram()` function within the src/whisper.cpp file can lead to an out-of-bounds read, which occurs when the software reads data outside the intended memory boundary. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** whisper.cpp version 95ea8f9b **Description** A local attacker can cause a reachable assertion in the `ggml ftype to ggml type()` function within the ggml/src/ggml.c file by manipulating the `ftype` argument. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** onnx versions prior to 1.22.0 **Description** A weakness in the onnxruntime component allows for a remote out-of-bounds read. This occurs within the `convPoolShapeInference opset19()` function located in the onnx/defs/nn/old.cc file. **Recommendations** Apply patch a7bf3a0f1d18bb62575236ef6e4944980c40e045 to resolve the issue. As a temporary mitigation, restrict the use of the `convPoolShapeInference opset19()` function.

**Name of the Vulnerable Software and Affected Versions** whisper.cpp versions prior to 1.8.3 **Description** A security flaw exists in the `whisper model load()` function within the ggml/src/ggml.c file. This issue allows for a null pointer dereference, which occurs when a program attempts to read or write to a memory location that is null, typically leading to a crash. Exploitation requires local access to the system. **Recommendations** Update to a version later than 1.8.2. As a temporary workaround, restrict access to the `whisper model load()` function to minimize the risk of exploitation.