CVE-2025-0312
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Mar 20, 2025
Updated: Mar 28, 2025
CWE ID 476
Summary
CVE-2025-0312 is a vulnerability affecting versions of the Ollama library (ollama/ollama) below 0.3.15. An attacker can exploit this issue by crafting a malicious GGUF model file. Upon uploading and processing this file on the Ollama server, a null pointer dereference occurs, leading to a crash. This crash can be leveraged for a Denial of Service (DoS) attack through remote network access.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Ollama