llama.cpp versions 0.9.0 contain a null pointer dereference vulnerability (CWE-476) in the LLaMA-Android JNI wrapper's bench_1model() function. This function fails to check if the model context pointer is null before dereferencing it. An attacker can exploit this by providing a malicious, corrupt, or truncated model file that triggers a null context condition, causing the application to crash with a SIGSEGV signal. This results in denial of service by terminating the Android application process.

Exploitation of this vulnerability leads to a denial of service condition by crashing the Android application using the vulnerable llama.cpp library. There is no indication of privilege escalation, data disclosure, or code execution. The impact is limited to application termination.

No official patch or remediation is currently available for this vulnerability. Users should monitor the vendor's advisories for updates. Until a fix is released, avoid using untrusted or malformed model files with the affected version to reduce risk.