CyberRota Analysis
AI-GeneratedThe vulnerability in llama.cpp allows remote attackers to trigger a denial of service by sending a POST request with a negative top_n value to the /rerank endpoint when the --reranking flag is enabled. This can result in application crashes due to std::bad_alloc errors and HTTP 500 responses. Developers and system administrators using this software should prioritize addressing this issue to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n value in a POST request to /rerank.
Related CVEs
Other vulnerabilities affecting the same vendor(s)