---
id: CVE-2026-65315
title: >-
  Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF
  Metadata Parser
summary: >-
  Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability
  in the GGUF metadata parser that allows remote attackers to crash the server
  by supplying a crafted GGUF file with attacker-controlled length and count
  fields…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-789
vendor: Ollama
product: Ollama
affected:
  - Ollama <= f0078ae
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-07-22T18:21:09.443117Z'
published: '2026-07-21'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T14:18:16.098Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-65315'
references:
  - url: 'https://github.com/ollama/ollama/issues/17042'
    label: GitHub Issue
  - url: 'https://github.com/ollama/ollama'
    label: Product
  - url: >-
      https://www.vulncheck.com/advisories/ollama-remote-denial-of-service-via-attacker-controlled-allocation-in-gguf-metadata-parser
tags:
  - cve.org
epss: 0.00807
epssPercentile: 0.54948
ingestedAt: '2026-09-24T15:45:56.720Z'
---

## Overview

Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata array counts that are used as allocation sizes without validation against remaining file size. Attackers can upload a sub-1KB crafted GGUF file via the blob upload and model create or pull API endpoints to trigger unrecoverable Go runtime out-of-memory fatal errors or makeslice panics that bypass recovery middleware and crash the entire server process.

## Affected

- `Ollama <= f0078ae`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.