CVE-2025-0315

7.5 highEPSS 0.7%

High (7.5) in ollama ollama. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-770
Published: 2025-03-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ollama:ollama

Packages (OSV)

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-fccc-8m69-8r78	Go	github.com/ollama/ollama	<=0.3.14	no fix published
GO-2025-3557	Go	github.com/ollama/ollama	all versions	no fix published

References

https://huntr.com/bounties/da414d29-b55a-496f-b135-17e0fcec67bc

Check your stack JSON