Description
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger a null context condition, causing a SIGSEGV crash that terminates the Android application process and results in denial of service.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ggml-org llama.cpp
Default version status: unaffected
b1886 to ≤ b7445affected5c0d18881e0e9794c96b2602736b758bac9d9388unaffected
References
- https://github.com/ggml-org/llama.cpp/releases/tag/b7446 ↗
- https://github.com/ggml-org/llama.cpp/commit/5c0d18881e0e9794c96b2602736b758bac9d9388 ↗
- https://github.com/Vladimir-tokarev-cyera/llama-cpp-security-patches ↗
- https://www.vulncheck.com/advisories/llama-cpp-b1886-b7445-null-pointer-dereference-dos-via-llama-android-cpp ↗