ggml

llama.cpp discloses out-of-bounds write flaw

llama.cpp's Pocket-TTS component has a heap out-of-bounds write flaw triggered by a malicious mmproj file; it requires local access and a public exploit exists. Upgrading to build b11796 fixes it, but the root-cause patch is still open.