# CVE-2024-42479

## Summary

- **CVE ID:** CVE-2024-42479
- **Severity:** CRITICAL
- **CVSS Score:** 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
- **CWE:** CWE-123
- **Published:** Aug 12, 2024
- **Last Modified:** Mar 13, 2026

## Description

llama.cpp provides LLM inference in C/C++. The unsafe `data` pointer member in the `rpc_tensor` structure can cause arbitrary address writing. This vulnerability is fixed in b3561.

## Affected Products

- ggerganov — llama.cpp (< b3561)

## References

- [CNA](https://github.com/ggerganov/llama.cpp/security/advisories/GHSA-wcr5-566p-9cwj)
- [CNA](https://github.com/ggerganov/llama.cpp/commit/b72942fac998672a79a1ae3c03b340f7e629980b)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 2.63%
- **EPSS Percentile:** 84.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._