Vulnerabilities in Ollama
13 resultsVexday analysis
Ollama apresenta 5 vulnerabilidades catalogadas, nenhuma em exploração ativa conhecida, com 2 divulgações recentes (últimos 90 dias) que indicam descobertas contínuas. A fraqueza dominante (CWE-494 - download de código sem validação de integridade) sugere risco de execução de código malicioso em contextos de integração com repositórios externos, embora sem severidade crítica identificada até o momento.
CVE-2025-0317HIGHDivide By Zero in ollama/ollamaEPSS 13.5%CVE-2026-7482HIGHOllama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackersEPSS 1.9%CVE-2024-12055HIGHDoS using malicious gguf model file in ollama/ollamaEPSS 0.8%CVE-2025-15514HIGHOllama Multi-Modal Model Image Processing NULL Pointer DereferenceEPSS 0.7%CVE-2024-12886HIGHOut-Of-Memory (OOM) Vulnerability in ollama/ollamaEPSS 0.7%CVE-2025-0315HIGHAllocation of Resources Without Limits or Throttling in ollama/ollamaEPSS 0.7%CVE-2025-0312HIGHNULL Pointer Dereference in ollama/ollamaEPSS 0.6%CVE-2026-42249HIGHRemote Code Execution in Ollama via Update MechanismEPSS 0.6%CVE-2024-8063HIGHDivide by Zero in ollama/ollamaEPSS 0.6%CVE-2026-65315HIGHOllama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata ParserEPSS 0.6%CVE-2025-1975HIGHImproper Validation of Array Index in ollama/ollamaEPSS 0.5%CVE-2026-15685HIGHOllama downloadBlob Improper Validation of Array Index Denial-of-Service VulnerabilityEPSS 0.4%CVE-2026-42248HIGHMissing Signature Verification for Updates in OllamaEPSS 0.4%