CVE-2026-7482

CVE-2026-7482：Ollama GGUF 堆越界读取复现 本仓库包含我对 CVE-2026-7482 的本地复现脚本，该漏洞是易受攻击的 Ollama GGUF 加载和量化路径中的堆越界读取。 这项工作的关键结果范围很窄：我能够可靠地触发堆越界（Heap OOB）条件，并生成受越界影响的量化 GGUF 产物。我未能展示出明确的黑盒影响，例如可靠的明文密钥恢复或从产物中直接提取金丝雀（canary）字符串。 此 PoC 的功能 exp.py 创建两个 GGUF 文件： 一个恶意的截断 GGUF，其中包含一个张量，其声明的字节数超过文件实际包含的字节数；...

PT-2026-34454

Name of the Vulnerable Software and Affected Versions Ollama affected versions not specified Description An out-of-bounds memory read and write issue exists in the GGUF GPT-Generated Unified Format quantization engine. This occurs because the engine lacks proper bounds checking and trusts tensor...

Mind the Gap: a Practical Attack on GGUF Quantization

With the increasing size of frontier LLMs, post-training quantization has become the standard for memory-efficient deployment. Recent work has shown that basic rounding-based quantization schemes pose security risks, as they can be exploited to inject malicious behaviors into quantized models tha...