Executive Summary

This vulnerability occurs in the MLX array framework for machine learning on Apple silicon, specifically in versions prior to 0.29.4. When loading malicious GGUF files, an untrusted pointer from an external library (gguflib) is dereferenced without proper validation, causing a segmentation fault that crashes the application.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can cause the application using the MLX framework to crash unexpectedly when processing malicious GGUF files. This can lead to denial of service or disruption of machine learning operations on affected systems.

Useful 0 Not Useful 0

Mitigation Strategies

Update the MLX array framework to version 0.29.4 or later, as this version contains the patch that fixes the segmentation fault caused by loading malicious GGUF files.

Useful 0 Not Useful 0