CVE-2024-42478 llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor
An attacker can read arbitrary memory addresses via the RPC server in llama.cpp, potentially exposing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-42478?
CVE-2024-42478 is a medium-severity vulnerability in ggerganov llama.cpp, published on 12 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address reading. This vulnerability is fixed in b3561.
Weakness: CWE-125
Which versions are affected by CVE-2024-42478?
It affects 1 product.
Products include Ggml Llama.cpp.
How do I fix CVE-2024-42478?
No fix has been published for CVE-2024-42478 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-42478 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-42478 exists.
Other vulnerabilities in ggerganov llama.cpp
- CVE-2024-42479 llama.cpp allows write-what-where in rpc_server::set_tensor
- CVE-2026-34159 llama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
- CVE-2026-43629 llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Restore
- CVE-2026-43631 llama.cpp b7492–b9060 Use-After-Free RCE via llama-server
- CVE-2026-43632 llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints
Sources
Also known as GHSA-5vm9-p64x-gqw9.