OSS bugs
- unace: heap buffer over-read in magic scanner
- unace-nonfree: overlapping strcpy in path processing
- llama.cpp: ggml-backend-meta axis <= GGML_MAX_DIMS off-by-one
- mlx: out-of-bounds read in GGUF metadata loader (fix)
- llama.cpp: GGUF loader accepts a tensor size that wraps to 0 after padding
- LiteRT: integer overflow to out-of-bounds
- stable-diffusion.cpp: signed shape-product wrap in safetensors reader