CVE-2025-0317: Ollama

High severity, CVSS 7.5. EPSS: 14.2% chance of exploitation in the next 30 days.

A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.

Affected products

• Ollama Ollama: up to and including 0.3.14

Published 2025-03-20. Last modified 2026-06-17.