CVE-2026-7482

CVE-2026-7482: Ollama GGUF ヒープ領域外読み取りの再現 このリポジトリには、脆弱性のある Ollama GGUF 読み込みおよび量子化パスにおけるヒープ領域外読み取り（CVE-2026-7482）のローカル再現スクリプトが含まれています。 この作業で重要な結果は限定的です。ヒープ領域外（OOB）状態を確実に発生させ、OOB の影響を受けた量子化 GGUF アーティファクトを生成することはできました。しかし、平文シークレットの確実な復元や、生成されたアーティファクトからのカナリア文字列の直接抽出など、明確なブラックボックス的な影響を示すことはできませんでした。 こ...

CVE-2026-7482-PoC

CVE-2026-7482: Ollama ヒープ領域外読み取り（1-Day PoC） このリポジトリには、CVE-2026-7482 （Ollama の GGUF モデルローダー（0.17.1 より前のバージョン）における認証不要の領域外（OOB）読み取り脆弱性）に対する 1-Day Proof of Concept（PoC）エクスプロイトチェーンが含まれています。 注記: これは 1-Day リサーチによる再現です。私は元の CVE を発見したわけではありません。この PoC...

CVE-2026-7482

🚨 CVE-2026-7482: Ollama におけるヒープバッファオーバーリード 📝 説明 CVE-2026-7482 は、ローカル言語モデルを実行するためのオープンソースフレームワークである Ollama の /api/create および /api/push エンドポイントにおける、重大なヒープバッファオーバーリード （ Heap Buffer Over-Read ）の脆弱性を特定したものです。 この脆弱性により、リモートかつ認証されていない攻撃者がプロセスメモリを漏えい させ、以下のような機密データを暴露する可能性があります: APIキーおよび認証トークン 環境変数...

context-segmentation

SLMエージェントのためのコンテキストセグメンテーション これは、科学論文 Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks で提案されたソリューションの実装です。 セットアップ Python 3.12.3+ がインストールされていること、および Docker engine があることを確認してください。 Python環境 root@kitploit: python3 -m venv .venv source .venv/bin/activate python3 -...

CVE-2026-86289

A flaw was found in Ollama's GGUF Decoder component. A remote attacker can exploit an integer overflow vulnerability in the readGGUFV1String function by performing a manipulation. This could lead to a denial of service DoS, making the affected system unavailable. Mitigation To mitigate this issue...

CVE-2026-86289

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

EUVD-2026-72306

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-86289 Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-86289

Ollama up to 0.31.1 contains an integer overflow in the function readGGUFV1String within the file fs/ggml/gguf.go, part of the GGUF Decoder component. The vulnerability is remotely exploitable with user interaction required and no authentication needed, leading to a low availability impact (CVSS ...

CVE-2026-86289 Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-86289 Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

PT-2026-86660

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-86289: Integer Overflow or Wraparound

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

DEBIAN-CVE-2026-52131

llama.cpp b5693 and before has a Reachable Assertion via the ggufreader::read function...

PT-2026-84366

llama.cpp b5693 and before has a Reachable Assertion via the gguf reader::read function...

CVE-2026-52131

llama.cpp versions b5693 and before are affected by a Reachable Assertion vulnerability located within the gguf_reader::read function. While several Linux distributions have identified this vulnerability, some reports indicate that a vendor-supplied patch may not be available for certain affected...

CVE-2026-65315

A flaw was found in Ollama. A remote attacker can exploit an uncontrolled memory allocation vulnerability in the GGUF metadata parser. By supplying a specially crafted GGUF file, an attacker can manipulate length and count fields, leading to excessive memory allocation. This can cause the server ...

CVE-2026-58474

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...

EUVD-2026-66642

whichllm before 0.5.16 contains a code injection vulnerability in the run and snippet commands that allows a remote attacker who controls a HuggingFace repository to achieve arbitrary code execution by crafting a malicious GGUF filename containing double quotes or other special characters. The...