Vulnerabilities in ollama
13 resultsVexday analysis
Ollama apresenta um perfil de risco baixo com 8 vulnerabilidades catalogadas e nenhuma sob exploração ativa confirmada. A fraqueza dominante é leitura fora dos limites de memória (CWE-125), sem severidade crítica registrada, e apenas 1 vulnerabilidade foi publicada nos últimos 90 dias, indicando um ciclo de descoberta estável.
CVE-2025-0317HIGHDivide By Zero in ollama/ollamaEPSS 13.5%CVE-2026-7482HIGHOllama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackersEPSS 1.9%CVE-2024-12055HIGHDoS using malicious gguf model file in ollama/ollamaEPSS 0.8%CVE-2025-15514HIGHOllama Multi-Modal Model Image Processing NULL Pointer DereferenceEPSS 0.7%CVE-2024-12886HIGHOut-Of-Memory (OOM) Vulnerability in ollama/ollamaEPSS 0.7%CVE-2025-0315HIGHAllocation of Resources Without Limits or Throttling in ollama/ollamaEPSS 0.7%CVE-2025-0312HIGHNULL Pointer Dereference in ollama/ollamaEPSS 0.6%CVE-2026-42249HIGHRemote Code Execution in Ollama via Update MechanismEPSS 0.6%CVE-2024-8063HIGHDivide by Zero in ollama/ollamaEPSS 0.6%CVE-2026-65315HIGHOllama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata ParserEPSS 0.6%CVE-2025-1975HIGHImproper Validation of Array Index in ollama/ollamaEPSS 0.5%CVE-2026-15685HIGHOllama downloadBlob Improper Validation of Array Index Denial-of-Service VulnerabilityEPSS 0.4%CVE-2026-42248HIGHMissing Signature Verification for Updates in OllamaEPSS 0.4%