stable-diffusion.cpp imatrix loader heap out-of-bounds write
An image tool can be stopped or hacked by one malicious file.
Summary
The imatrix file loader in stable-diffusion.cpp mishandles repeated tensor names, causing writes beyond heap buffers. Loading a crafted .imatrix file through the --imat-in conversion path can corrupt the heap or crash the process.
Affected when
- Loading a .imatrix file through the --imat-in conversion path
- Versions from master-742-1a13107 until master-763-4fcc6fe
What to do
Update to master-763-4fcc6fe or later.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen