PT-2026-34454

Name of the Vulnerable Software and Affected Versions Ollama affected versions not specified Description An out-of-bounds memory read and write issue exists in the GGUF GPT-Generated Unified Format quantization engine. This occurs because the engine lacks proper bounds checking and trusts tensor...

CVE-2024-12055 DoS using malicious gguf model file in ollama/ollama

A vulnerability in Ollama versions =0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded to the public Ollama server. When the server processes this malicious model, it crashes, leading to a Denial of Service DoS attack. The root cause of the issue is an...

CVE-2024-12055

CVE-2024-12055 affects Ollama

CVE-2024-45853

CVE-2024-45853 affects MindsDB platform (23.10.2.0 and newer) via deserialization of untrusted data when using an uploaded ‘inhouse’ model for prediction, enabling arbitrary code execution on the server. The connected sources confirm the vulnerability, its impact on server integrity and availabil...