CyberRota Analysis
AI-GeneratedThe LLaMA-Android JNI wrapper in versions b1886 through b7445 is vulnerable to an integer overflow due to improper validation of the n_seq_max parameter in the new_1batch() function, leading to potential heap buffer corruption. This flaw allows attackers to exploit the vulnerability via malicious model files or JNI calls, resulting in denial of service or arbitrary code execution in affected Android applications. Android developers and security teams should prioritize addressing this vulnerability to mitigate risks associated with potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
llama.cpp builds b1886 through b7445 contain an integer overflow vulnerability in the LLaMA-Android JNI wrapper where the new_1batch() function multiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter without overflow validation, causing heap buffer allocation to wrap and allocate insufficient memory. Attackers can exploit this by providing a crafted n_seq_max value through a malicious model file or JNI call to trigger heap corruption and achieve denial of service or arbitrary code execution on Android applications using the LLaMA-Android binding.