Skip to content
OpenAdvisories

Package · Go

github.com/ollama/ollama

16 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.5
    CVE-2025-1975

    Improper Validation of Array Index in ollama/ollama

    A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model…

    Ollama ollama/ollama k8sgpt mods Wolfi Go
  • High 7.5
    CVE-2024-8063

    Divide by Zero in ollama/ollama

    A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes t…

    Ollama ollama/ollama mods github.com/ollama/ollama Wolfi Go
  • High 7.5
    CVE-2025-0312

    NULL Pointer Dereference in ollama/ollama

    A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial o…

    Ollama ollama/ollama mods github.com/ollama/ollama Wolfi Go
  • High 7.5
    CVE-2024-12886 Public exploit

    Out-Of-Memory (OOM) Vulnerability in ollama/ollama

    An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present i…

    Ollama ollama/ollama github.com/ollama/ollama Go
  • High 7.5
    CVE-2025-0317 EPSS 15%

    Divide By Zero in ollama/ollama

    A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting…

    Ollama ollama/ollama mods github.com/ollama/ollama Wolfi Go
  • High 7.5
    CVE-2025-0315

    Allocation of Resources Without Limits or Throttling in ollama/ollama

    A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

    Ollama ollama/ollama mods github.com/ollama/ollama Wolfi Go
  • High 7.5
    CVE-2024-12055

    DoS using malicious gguf model file in ollama/ollama

    A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. When the server processes this malicious model, it crashes, leading to a Denial of Service (DoS) attac…

    Ollama ollama/ollama mods github.com/ollama/ollama Wolfi Go
  • High 8.2
    CVE-2024-39720

    Ollama Out-of-bounds Read

    An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing…

    github.com/ollama/ollama Go
  • High 8.8
    CVE-2024-37032 Public exploit Scanner template EPSS 90%

    Ollama does not validate the format of the digest (sha256 with 64 hex digits)

    Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring.

    ollama github.com/ollama/ollama ollama-cpu Wolfi Go