{"id":"CVE-2026-65315","title":"Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser","summary":"Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-789"],"vendor":"Ollama","product":"Ollama","affected":["Ollama <= f0078ae"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"partial","timestamp":"2026-07-22T18:21:09.443117Z"},"published":"2026-07-21","updated":"2026-09-24","sourceUpdated":"2026-09-24T14:18:16.098Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-65315","references":[{"url":"https://github.com/ollama/ollama/issues/17042","label":"GitHub Issue"},{"url":"https://github.com/ollama/ollama","label":"Product"},{"url":"https://www.vulncheck.com/advisories/ollama-remote-denial-of-service-via-attacker-controlled-allocation-in-gguf-metadata-parser"}],"tags":["cve.org"],"epss":0.00807,"epssPercentile":0.55353,"ingestedAt":"2026-09-24T15:45:56.720Z","slug":"CVE-2026-65315","body":"## Overview\n\nOllama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata array counts that are used as allocation sizes without validation against remaining file size. Attackers can upload a sub-1KB crafted GGUF file via the blob upload and model create or pull API endpoints to trigger unrecoverable Go runtime out-of-memory fatal errors or makeslice panics that bypass recovery middleware and crash the entire server process.\n\n## Affected\n\n- `Ollama <= f0078ae`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":41.3,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}