CVE-2024-42478

Name of the Vulnerable Software and Affected Versions llama.cpp versions prior to b3561

Description The issue is related to the rpc tensor structure in llama.cpp, which provides LLM inference in C/C++. The data pointer member in this structure is unsafe, allowing for arbitrary address reading.

Recommendations For versions prior to b3561, update to b3561 or later to resolve the issue. As a temporary workaround, consider restricting access to the rpc tensor structure to minimize the risk of exploitation.