repository icon
ollama / ollama Project repository

Get up and running with Llama 3.2, Mistral, Gemma 2, and other large language models.

Submit a report

FIRST INTERACTION

WITHINN/A DAYS

REVIEW

WITHIN25 DAYS

FIX

WITHIN90 DAYS

Multiple unauthorized APIs can cause DOS/impact users
nlrvana
pending
Ollama Remote Code Execution
h4mster1
pending
DoS using malicious gguf model file in ollama/ollama
mountain-8
duplicate
High
Missing size check of "n" in parseSafetensors Leads to DoS Vulnerability
danisjiang
duplicate
High
A malicious manifests can lead to DoS due to unchecked array bound access via ne...
ac0d3r
High
•$750•CVE-2025-1975
Ollama server can be crashed by a malicious gguf file
superoptimizer
duplicate
High
Missing Length Check in readGGUFString Leads to OOM and DoS Vulnerability
danisjiang
duplicate
High
GGUF Heap Overflow (slice bounds out of range) Exploit Causing DoS
soloplayer140
duplicate
High
The malicious gguf model can lead to DoS due to alloc negative size slice (integ...
pcy190
duplicate
High
The malicious gguf model can lead to DoS due to unchecked buffer access (truncat...
pcy190
duplicate
High
Out-of-range slice allocation leading to DoS
pventuzelo
pending
Index Out of Range Leading to DoS
pventuzelo
pending
Integer overflow leading to DoS
pventuzelo
duplicate
High
Out-of-Range Length Allocation Leading to DoS
pventuzelo
duplicate
High
DOS: Uncaught Exception due to null pointer dereference
michealkeines
duplicate
High
DOS: Path Traversal leading to Arbirtary Dir creation
michealkeines
pending
Denial of Service via cache mechanism
pventuzelo
pending
Information Disclosure via Error Message
michealkeines
pending
Ollama server authentication flow is vulnerable to token stealing
pventuzelo
pending
SSRF via model pull
trganda
pending
Crash due to invalid UTF-8 characters during prompt tokenisation in Ollama/ollam...
junan1234
pending
NPE leading to DoS
0gur1
duplicate
High
A malicious gguf model can lead to DoS due to unchecked null pointer dereference...
lyutoon
High
•$750•CVE-2025-0312
A malicious gguf model can lead to DoS due to unchecked array bound access via n...
lyutoon
High
•$750•CVE-2025-0313
malicious gguf model can cause DoS by allocate unlimited memory via network acce...
lyutoon
High
•$750•CVE-2025-0315
malicious gguf model can be uploaded and created causing division by zero via ne...
lyutoon
High
•$750•CVE-2025-0317
DoS using malicious gguf model file
lyutoon
High
•$750•CVE-2024-12055
Ollama server is vulnerable to OOM DoS attacks when using `makeRequestWithRetry`...
pventuzelo
High
•$750•CVE-2024-12886
Insecure Deserialization of Untrusted JSON Data in Ollama API Allows Arbitrary C...
r4335
not applicable
NPE leading to DoS
0gur1
self closed
Unauthorized use of the Ollama API
aftersnows
self closed
The /api/copy route allows unlimited replication of model instances leading to i...
aftersnows
informative
Medium
Divide by zero leading to DoS
0gur1
High
•$750•CVE-2024-8063
Remote code execution via zipslip
pyozzi-toss
Critical
•$1500•CVE-2024-7773