The vulnerability is an out‑of‑bounds read in the recurrent memory state restore path of llama.cpp, enabling an attacker who can write to the slot save directory to construct a malicious slot file with an oversized seq_id that causes memory past the end of the allocated cells array to be read. The leak exposes heap data, including pointer values, into server logs, undermining ASLR protection and potentially paving the way for further attacks. This flaw is identified as CWE‑125 and CWE‑209.

The issue affects any build of the llama.cpp library that incorporates git commit b5702 through b7653. Users running these builds—whether compiler‑based or bundled in downstream applications—are vulnerable unless they apply the patched commit.

The CVSS score of 6.3 classifies the flaw as moderate, and while an EPSS score is not available and the vulnerability is not listed in CISA KEV, the need for write access to a specific directory limits the attack surface to environments where an attacker can create or modify slot files. If this write privilege is granted locally or via an exposed interface, the exfiltration of heap memory can enable the attacker to defeat ASLR and may facilitate subsequent exploitation steps.