CVE-2025-0317 — Divide By Zero in ollama/ollama
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by…
Published: 2025-03-20 · CVSS: 7.5 · CVSS 3.0
A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7