CVE-2026-65315 | Ollama (HEAD f0078ae) contains an uncontrolled memory alloca… | CVSS 7.5 HIGH

Description

Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata array counts that are used as allocation sizes without validation against remaining file size. Attackers can upload a sub-1KB crafted GGUF file via the blob upload and model create or pull API endpoints to trigger unrecoverable Go runtime out-of-memory fatal errors or makeslice panics that bypass recovery middleware and crash the entire server process.

Metadata

CVE ID: CVE-2026-65315
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-07-21 20:57 UTC
Published: 2026-07-21 21:18 UTC
Last updated: 2026-07-22 18:24 UTC
Primary CWE: CWE-789
Memory Allocation with Excessive Size Value
Vendor / Product: Ollama / Ollama
Sources: cve.org · NVD

Severity & Metrics

7.5 HIGH CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: yes
Tech. Impact: partial

Affected products (1)

Vendor	Product	Platform	Versions
Ollama	Ollama	—	0 ≤ f0078ae

Weakness (CWE)

CWE	Source	Description
CWE-789	cna	Memory Allocation with Excessive Size Value

CVSS scores (2)

Score	Severity	Version	Source	Vector
8.7	HIGH	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
7.5	HIGH	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References (3)