CyberRota Analysis
AI-GeneratedThe LLaMA-Android JNI wrapper in versions b1886 through b7445 is vulnerable due to a null pointer dereference in the bench_1model() function, which does not validate the model context pointer. This flaw allows attackers to exploit the application by supplying a malicious or corrupted model file, leading to a SIGSEGV crash and resulting in denial of service. Developers and security teams managing Android applications utilizing this library should prioritize remediation to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
llama.cpp builds b1886 through b7445 contain a null pointer dereference vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() function fails to validate the model context pointer before dereferencing it. Attackers can supply a malicious, corrupt, or truncated model file to trigger a null context condition, causing a SIGSEGV crash that terminates the Android application process and results in denial of service.