A null pointer dereference exists in the LLaMA-Android JNI wrapper within llama.cpp builds b1886 through b7445. The bench_1model() function does not validate the model context pointer, allowing an attacker to supply a malicious, corrupted, or truncated model file that causes a SIGSEGV crash and terminates the Android application process, resulting in a denial of service. This flaw is classified as CWE‑476, a null pointer dereference weakness. The primary impact is that the affected application becomes unavailable immediately upon loading the compromised model, creating a local service disruption. Confidentiality and integrity are not directly affected as the vulnerability does not lead to code execution or data leakage.

The affected systems are Android applications built with the ggml‑org:llama.cpp project, specifically builds between b1886 and b7445 inclusive. Versions before b7446 and after are not impacted by this null pointer dereference. The vulnerability exists in the llama‑android.cpp wrapper of the project’s source code, which is included in the standard distribution of llama.cpp for Android platforms.

The CVSS score of 6.8 indicates a medium severity vulnerability. Because the exploit requires the attacker to supply a malicious model file to the application, the attack vector is local or requires some level of user interaction. The EPSS score is not available, so the likelihood of exploitation cannot be quantified, but the absence from the CISA KEV list means it is not known to be actively exploited in the wild. However, any environment where users can load arbitrary models poses a risk of denial of service if an attacker can provide a corrupted file.