This vulnerability in ggml-org llama.cpp (specifically in the file common/jinja/parser.cpp of the Jinja Minja Template Parser component) allows an attacker with local access to trigger a reachable assertion by providing crafted input '{{9|9|{'. The assertion failure could potentially lead to denial of service or other unintended behavior. The issue was reported early to the project but remains unaddressed, and the exploit has been publicly disclosed.

The vulnerability requires local access and can cause a reachable assertion failure, which may lead to denial of service conditions. There is no indication of privilege escalation, remote code execution, or data disclosure from the available information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a fix, users should restrict local access to trusted users and monitor for any updates from the vendor.