Out-of-Bounds Read in llama.cpp Slot Restore

Executive Summary

This vulnerability is an out-of-bounds read issue in llama.cpp versions b5702 through b7653. It occurs when restoring recurrent memory states from slot files. Attackers with write access to the slot save directory can create a malicious file with an oversized seq_id value, causing the program to read memory beyond the allocated cells array. This leaks heap data, including pointer values, into server logs, which can defeat ASLR protections and enable further attacks.

Useful 0 Not Useful 0

Impact Analysis

If you use affected versions of llama.cpp, an attacker with write access to your slot save directory could exploit this to read sensitive memory contents. This may expose internal data, bypass security mechanisms like ASLR, and potentially facilitate additional attacks such as code execution or privilege escalation. The impact depends on your system configuration and deployment environment.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized data exposure, which may violate compliance requirements under GDPR (data protection) or HIPAA (health information privacy). If exploited, it might result in data breaches, unauthorized access to personal or sensitive data, and failure to maintain confidentiality and integrity of stored information.

Useful 0 Not Useful 0

Mitigation Strategies

Update llama.cpp to a version beyond b7653 to address the out-of-bounds read vulnerability in the recurrent memory state restore path.

Useful 0 Not Useful 0