Database/AI/ML frameworks & serving
llama.cpp (RPC backend): Unsafe `data` pointer in `rpc_tensor`
CVE-2024-42479AI/ML frameworks & servingcurated
Impact
Unsafe data pointer in rpc_tensor → arbitrary address write
Who can reach it
Unauthenticated network to the llama.cpp RPC port on a distributed inference setup
What to do
Rebuild; the RPC backend has no authentication and must never be tenant-reachable
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.