CVE-2024-42477

Name of the Vulnerable Software and Affected Versions llama.cpp version b3561 and earlier

Description The issue arises from the unsafe type member in the rpc tensor structure, which can cause a global-buffer-overflow. This may lead to memory data leakage.

Recommendations For versions prior to b3561, update to b3561 or later to resolve the issue. As a temporary workaround, consider restricting access to the rpc tensor structure until a patch is available.