GGML GGUF File Format Vulnerabilities

The GGML library contains memory corruption vulnerabilities during parsing of GGUF files, which can be exploited by an attacker to execute code on a victim's computer. Multiple vulnerabilities exist, including unchecked kv count, unchecked tensor count, and heap overflows. Databricks worked with the GGML.ai team to address these vulnerabilities in the library.