cvedb.io
CVE-2025-0315
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-03-20T10:15:52.530 · Last modified 2026-06-17T08:26:16.130

Summary

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

Affected products

ollama — ollama

Does this affect you?

Add your gear to cvedb and we'll alert you only when ollama ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.