llama.cpp versions b5702 and 0.17.1 contain an out-of-bounds read vulnerability (CWE-125) in the recurrent memory state restore path. Attackers with write permissions to the slot save directory can create a malicious slot file with an oversized seq_id value, causing the software to read memory beyond the allocated cells array. This results in leakage of heap data, including pointer values, into server logs. Such leakage defeats Address Space Layout Randomization (ASLR) protections and may facilitate further exploitation. The vulnerability has a CVSS 4.0 score of 6.3 (medium severity). There is no vendor advisory or patch available at this time.

The vulnerability allows an attacker with write access to a specific directory to cause an out-of-bounds read, leaking heap memory contents including pointer values. This memory disclosure can defeat ASLR protections, potentially making subsequent attacks easier. However, exploitation requires write access to the slot save directory, limiting the attack surface. There are no known exploits in the wild. The impact is classified as medium severity based on the CVSS score.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict write access to the slot save directory to trusted users only to prevent attackers from placing malicious slot files.