CVE-2026-86289

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

CVE-2026-86289

Ollama up to 0.31.1 contains an integer overflow in the function readGGUFV1String within the file fs/ggml/gguf.go, part of the GGUF Decoder component. The vulnerability is remotely exploitable with user interaction required and no authentication needed, leading to a low availability impact (CVSS ...

CVE-2026-86289 Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow

A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public...

SUSE CVE-2025-66960

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...

PYSEC-2026-102

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...

CVE-2025-66960

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...

Ollama security vulnerabilities

Ollama is an open-source tool developed by Ollama that can be run locally, used for managing and customizing large language models. Version 0.12.10 of Ollama contains a security vulnerability. This vulnerability stems from the readGGUFV1String function in fs/ggml/gguf.go, which never reads the...