Ollama (GGUF model loader): Heap out-of-bounds read from an attacker-supplied GGUF via `/api/create`

Impact

Heap out-of-bounds read from an attacker-supplied GGUF via /api/create

Who can reach it

Customer-supplied model file to an exposed API

What to do

Upgrade to 0.17.1+

References

Related entries

• TensorFlow (SavedModel protobuf): Mutating a SavedModel protobuf crashes or corrupts the serving processCVE-2020-15206 · TensorFlow (SavedModel protobuf)Critical
• Jupyter Server Proxy: Authentication weakness in proxied-process accessCVE-2024-28179 · Jupyter Server ProxyCritical
• vLLM (Mooncake): Unsafe deserialization over ZMQ/TCP bound to all interfacesCVE-2025-29783 · vLLM (Mooncake)Critical
• Keras (`utils.get_file`, tar extract): Path traversal on tar extractionCVE-2025-12060 · Keras (`utils.get_file`, tar extract)High
• llama.cpp (`gguf_init_from_file_impl`): Integer overflow in GGUF initCVE-2025-53630 · llama.cpp (`gguf_init_from_file_impl`)High
• Pure Storage FlashArray VASA provider: A vSphere or ESXi administrator with VASA access to a FlashArray escalates toCVE-2023-36628 · Pure Storage FlashArray VASA providerHigh