CVE-2025-50461

A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/modelmerger.py script when using the "fsdp" backend. The script calls torch.load with weightsonly=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted...

Ollama <= 0.3.3 DoS

The version of Ollama installed on the remote host is prior or equal to 0.3.3. It is, therefore, affected by a vulnerability. A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for blockcount in the...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to the execution of operations beyond buffer boundaries in memory, allowing attackers to execute arbitrary code or cause system failures.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code or cause a service failure using a specially created 3DM fi...

UBUNTU-CVE-2025-5169

A vulnerability classified as problematic has been found in Open Asset Import Library Assimp 5.4.3. This affects the function MDLImporter::InternReadFile3DGSMDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation leads to out-of-bounds read. Local access is required to approac...

InspireMusic 代码问题漏洞

InspireMusic is an open source music, song, and audio generation tool from FunAudioLLM. A code issue vulnerability exists in InspireMusic that stems from a deserialization issue in the file inspiremusic/cli/model.py...

Deserialization Of Untrusted Data

transformers is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to improper validation of user-supplied data during the parsing of model files, which allows deserialization of untrusted data...

CVE-2021-25206

Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Productmodel.php...

Vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside the buffer in memory, allowing a perpetrator to cause service failures and gain unauthorized access to protected information

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures and gain unauthorized access to protected information using a specially create...

Vulnerability of software for modeling, design, and drawing in AutoCAD, related to reading data outside the buffer in memory, allowing a perpetrator to cause service failures and gain unauthorized access to protected information

The vulnerability of software for modeling, design, and drawing in AutoCAD is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause system failures and gain unauthorized access to protected information using a specially create...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to buffer overflow in dynamic memory, allowing attackers to cause system failures.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created MODEL file...

Vulnerability of software for modeling, designing, and drawing in AutoCAD, related to buffer overflow in dynamic memory, allowing attackers to cause system failures and gain unauthorized access to protected information.

The vulnerability of software for modeling, designing, and drawing in AutoCAD is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to cause a service failure and gain unauthorized access to protected information using a specially created MODEL file...

Multiple deserialization vulnerabilities in PyTorch Lightning 2.4.0 and earlier versions

Overview PyTorch Lightning versions 2.4.0 and earlier do not use any verification mechanisms to ensure that model files are safe to load before loading them. Users of PyTorch Lightning should use caution when loading models from unknown or unmanaged sources. Description PyTorch Lightning, a...

Open Asset Import Library 安全漏洞

Open Asset Import Library assimp is an Open Asset Import Library open source library. A security vulnerability exists in Open Asset Import Library version 5.4.3, which stems from a resource consumption in the MDL File Handler component...

Ollama <= 0.3.14 Multiple Vulnerabilities

The version of Ollama installed on the remote host is prior or equal to 0.3.14. It is, therefore, affected by multiple vulnerabilities, including the following: - A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to upload and create a customized GGUF model file on the...

SUSE CVE-2025-0317

A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service DoS attack...

GHSA-9GCR-28RP-CC24 Ollama Divide By Zero vulnerability

A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service DoS attack...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through the creation and upload of a customized GGUF model file. An attacker can cause the server to allocate unlimited memory, leading to system unavailability by uploading a...

Division by zero

Overview Affected versions of this package are vulnerable to Division by zero via the ggufPadding function. An attacker can cause the server to crash by uploading and creating a customized GGUF model file on the server. PoC python import os import json import requests import hashlib if you use th...

Ollama Denial of Service (DoS) via Null Pointer Dereference

A vulnerability in ollama/ollama versions =0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial of Service DoS attack via remote network...

Ollama Allows Out-of-Bounds Read

A vulnerability in Ollama versions =0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. When the server processes this malicious model, it crashes, leading to a Denial of Service DoS attack. The root cause of the issue is an...