CVE-2024-34359

A high-severity vulnerability disclosed in 2024 affecting the llama.cpp inference engine. An attacker can craft a malicious GGUF model file to trigger a buffer overflow, enabling remote arbitrary code execution (RCE). The vulnerability affects llama.cpp itself and all higher-level tools built on top of it.