CVE-2026-65315 Details
Description
Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata array counts that are used as allocation sizes without validation against remaining file size. Attackers can upload a sub-1KB crafted GGUF file via the blob upload and model create or pull API endpoints to trigger unrecoverable Go runtime out-of-memory fatal errors or makeslice panics that bypass recovery middleware and crash the entire server process.
A vulnerability allowing uncontrolled memory allocation has been identified in Ollama versions through f0078ae. This issue arises in the GGUF metadata parser, where the server can be crashed by a crafted GGUF file. The vulnerability allows remote attackers to manipulate length and count fields related to string lengths, tensor dimensions, and metadata arrays. These fields are used as allocation sizes without proper validation against the remaining file size. Attackers can exploit this by uploading a sub-1KB crafted GGUF file via the blob upload and model create or pull API endpoints. This triggers unrecoverable Go runtime out-of-memory fatal errors or makeslice panics, bypassing recovery middleware and crashing the entire server process.
This vulnerability has been fixed in the Ollama repository. Users should update to the latest version.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 22, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-789 | Memory Allocation with Excessive Size Value | [email protected] |
Affected Products
No affected product data is available for this CVE.
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 22, 2026 | CVE Modified | CISA-ADP |
| Jul 21, 2026 | New CVE Received | [email protected] |