CVE-2024-42479

CVE-2024-42479 is a critical vulnerability affecting ggerganov's llama.cpp, an LLM inference library. It stems from an unsafe 'data' pointer in the 'rpc_tensor' structure, allowing for arbitrary memory writes. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with no user interaction, leading to complete compromise of confidentiality, integrity, and availability. While not yet listed in CISA's KEV catalog, there is significant community discussion and public proof-of-concept information available, indicating a high potential for future exploitation.