
Critical buffer validation bypass in deserialize_tensor() (llama.cpp < b8492). Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPH_COMPUTE. ASLR bypass + RCE over TCP 50052.
Critical buffer validation bypass in deserialize_tensor() (llama.cpp < b8492). Null tensor buffer skips bounds check, enabling unauthenticated arbitrary R/W via GRAPH_COMPUTE. ASLR bypass + RCE over TCP 50052.
Contains:
Technical analysis & exploit chain
Full Wireshark PCAPs (HELLO→BUFFER_CLEAR)
Suricata/Snort signatures
Lab reproduction (Windows b8487 + WSL PoC)
Detection/mitigation strategies