CVE-2024-12055: Ollama allows out-of-bounds read via crafted GGUF model

# CVE-2024-12055: Ollama allows out-of-bounds read via crafted GGUF model

https://gcdradar.vercel.app/incidents/cve-2024-12055-ollama-allows-out-of-bounds-read-via-crafted · AIR-2025-0247 · closed 2025-03-20

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-03-20
- AI role: Attack on AI
- Products: Ollama
- CVE ids: CVE-2024-12055
- CVSS: 7.5

## Summary

Ollama contains an out-of-bounds read vulnerability in the gguf.go file that causes server crashes when processing a maliciously crafted GGUF model file. The flaw enables a denial of service attack against the server.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-03-20: CVE-2024-12055: A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded… (https://nvd.nist.gov/vuln/detail/CVE-2024-12055)
- 2025-03-20: CVE-2024-12055: Ollama Allows Out-of-Bounds Read (https://github.com/advisories/GHSA-89qx-m49c-8crf)

## Sources

- 2025-03-20 GitHub Advisory Database: CVE-2024-12055: Ollama Allows Out-of-Bounds Read https://github.com/advisories/GHSA-89qx-m49c-8crf
- 2025-03-20 NVD: CVE-2024-12055: A vulnerability in Ollama versions <=0.3.14 allows a malicious user to create a customized gguf model file that can be uploaded… https://nvd.nist.gov/vuln/detail/CVE-2024-12055

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.