[Zer0Con 2025] Hardcore Inference Attack: Unraveling Llama.cpp’s RPC Heap Puzzle

[weaver]

15-year-old threat researcher Ruikai Peng (aka. retr0reg), will share his journey of transforming a heap-overflow in Llama.cpp RPC Distributed Inference Servers into a ten thousand-word exploitation writeup.

As an exclusive content for Zer0con, Ruikai will also provide insights into his experience in the AI/ML field and offer guidance to future threat researchers interested in transitioning into the AI/ML.

статья
https://retr0.blog/blog/llama-rpc-rce

 

[shrekushka]

Reminiscent of “vtable spraying”/“C++ obj confusion” but done in a more DIY, hammered out style.
+
Enjoying it.)