CVE-2024-8063High· 7.5▾ TwilightOllama Divide by Zero Vulnerability
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via OSV
Last analysed / modified upstream
0.6%
0.6% → 0.6%
A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for block_count in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
github.com/ollama/ollama <= 0.3.3Refer to the advisory for the patched release.
Connected by shared product, vendor, weakness, or advisory.
CVE-2024-28224High· 8.8Ollama DNS rebinding vulnerability
CVE-2025-63389CriticalOllama Platform has missing authentication enabling attackers to perform model management operations
CVE-2026-7020Medium· 5.6Ollama is Vulnerable to Path Traversal
CVE-2026-7482Critical· 9.1Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
CVE-2026-15685High· 7.5Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to cre…
CVE-2025-15514High· 7.5Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality