Advisories for Pypi/Mlx package

Segmentation fault in mlx::core::load_gguf() when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. Environment: OS: Ubuntu 20.04.6 LTS Compiler: Clang 19.1.7

Heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. Environment: OS: Ubuntu 20.04.6 LTS Compiler: Clang 19.1.7