Lucene search
+L

5 matches found

Vulnrichment
Vulnrichment
added 2026/07/21 9:18 p.m.6 views

CVE-2026-65315 Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

8.7CVSS5.5AI score0.00572EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/07/10 7:32 p.m.14 views

CVE-2025-53630 Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the ggufinitfromfileimpl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900062661bd22f3e792579...

9.3CVSS0.00318EPSS
SaveExploits0References2
CVE
CVE
added 2025/07/10 7:32 p.m.40 views

CVE-2025-53630

CVE-2025-53630 affects llama.cpp (ggml/gguf.cpp) where an integer overflow in gguf_init_from_file_impl can cause a heap out-of-bounds read/write. The vulnerability impacts inference paths in llama.cpp and is fixed by commit 26a48ad699d50b6268900062661bd22f3e792579. Connected sources document the ...

9.3CVSS6.5AI score0.00318EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/07/10 7:32 p.m.4 views

CVE-2025-53630 Integer Overflow in GGUF Parser can lead to Heap Out-of-Bounds Read/Write in gguf

llama.cpp is an inference of several LLM models in C/C++. Integer Overflow in the ggufinitfromfileimpl function in ggml/src/gguf.cpp can lead to Heap Out-of-Bounds Read/Write. This vulnerability is fixed in commit 26a48ad699d50b6268900062661bd22f3e792579...

9.3CVSS7AI score0.00318EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/03/15 12:0 a.m.14 views

PT-2025-11348 · Undefined · Undefined

Four CVEs assigned: CVE-2025-2446 path traversal, CVE-2025-2439 GGUF parser read, CVE-2025-2445 Python-engine injection, CVE-2025-2447 missing CSRF...

9.5AI score
SaveExploits0References2
Rows per page
Query Builder