Clarify GGML bounty submission fields

README.md

@@ -8,10 +8,17 @@ tags:
 library_name: other
 ---
 
-# GGML legacy loaders and quantizers n_dims stack out-of-bounds PoC suite
+# GGML legacy `n_dims` stack out-of-bounds in loaders and quantizers
 
 This repository contains benign malformed legacy GGML model files that demonstrate model-controlled `n_dims` stack out-of-bounds writes in current GGML legacy loader and quantizer paths.
 
+## Submission fields
+
+- Data format: GGML
+- Suggested title: GGML legacy model-controlled `n_dims` stack out-of-bounds in loaders and quantizers
+- Severity: High
+- Short description: Current GGML legacy loaders and quantizer helpers trust model-controlled `n_dims` and copy dimensions into fixed local arrays. Crafted legacy GGML files trigger ASAN-confirmed stack-buffer-overflow and release-build crashes in GPT-2, GPT-J, SAM, and quantizer paths.
+
 ## Summary
 
 - Affected target verified: ggml `v0.11.1`, commit `a056a26f508b6160438ddd8aabbc859d2a2e7a97`.

SHA256SUMS.txt

@@ -1,4 +1,4 @@
-6dd9896672337f1b83d0eed853f82d232aeca1b76e5daab794bcfbcf5be62850  ./README.md
+22875f664cdc9c2880902e8c7c2d318a051cdc2bf98c2b86543a53a26612ff76  ./README.md
 62892adf21342a70b3c6dee5adfa224a435f747a5e6eb7c84e5064f576e99b0c  ./artifacts/ggml_gpt2_loader_ndims3.bin
 d9a5880f374d68f1c618945e301997b454317e203d23ca35b3d7c11bd69b8ddb  ./artifacts/ggml_gpt2_quant_ndims1024.bin
 a0f8d2a774f739c6580e51348aa30f455de29c7a774b1f25c3ca27a593fae224  ./artifacts/ggml_gptj_loader_ndims64.bin