Downloads · 30 days
17
22% of all-time downloads
poc_strlen_overflow
aTmHnTR/poc_strlen_overflow
poc_strlen_overflow is a machine learning model from aTmHnTR. Use it for the machine learning task on the model card, and read the license before you ship it in a product. It is set up for gguf. The card lists the license as cc.
⚠️ This is not a real machine learning model.
All-time downloads
79
Public
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 55%
At a glance
- Library
- gguf
- License
- cc
- Access
- Public
- Created
- Dec 21, 2025
- Updated
- Dec 21, 2025
- SHA
- 33b860eb
Model card
From the Hugging Face model README
GGUF Deserialization PoC – Metadata String Length
⚠️ This is not a real machine learning model.
This repository contains a maliciously crafted GGUF file that demonstrates a
deserialization vulnerability in GGUF model loading as implemented in llama.cpp.
Summary
The GGUF file poc_strlen_overflow.gguf contains attacker-controlled metadata
string length fields. When the file is loaded by a GGUF consumer, these length
values are used directly during deserialization to allocate memory without
sufficient upper-bound validation.
This causes unsafe memory allocation behavior during model load and results in deterministic process termination or memory exhaustion before inference.
Affected Software
- llama.cpp
- GGUF model file format
Reproduction
From the project root of a llama.cpp build:
./llama.cpp/build/bin/llama-gguf poc_strlen_overflow.gguf r
- Library
- gguf
- License
- cc
- Created
- Dec 21, 2025
- Updated
- Dec 21, 2025