CVE-2025-0315: Ollama

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

Affected products

• Ollama Ollama: up to and including 0.3.14

Published 2025-03-20. Last modified 2026-06-17.