gguf
0 live · 13 on record · last incident 106 days ago
Records13
- closedGGUF Poisoned GGUF Templates Enable Inference-Time Supply Chain Attacks
Research · since Jun 2025 (approx.)
AI - closed9.1Ollama CVE-2026-7482: Ollama heap out-of-bounds read in GGUF model loader
Patch now · Disclosed · since 4 May 2026 · CVE-2026-7482
AI - closed7.5Ollama CVE-2025-66959: Ollama Denial of Service via GGUF Decoder
Patch now · Disclosed · since 21 Jan 2026 · CVE-2025-66959
AI - closed7.5Ollama CVE-2025-66960: Ollama Denial of Service via GGUF Metadata
Patch now · Disclosed · since 21 Jan 2026 · CVE-2025-66960
AI - closed8.8llama.cpp CVE-2025-49847: Buffer overflow in llama.cpp vocabulary loading
Patch now · Disclosed · since 17 Jun 2025 · CVE-2025-49847
AI - closed7.5Ollama CVE-2025-0315: Ollama Resource Exhaustion via Custom GGUF Models
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0315
AI - closed7.5Ollama CVE-2025-0317: Ollama Divide-By-Zero Error Leads to Server Crash
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0317
AI - closed7.5Ollama CVE-2025-0312: Ollama Null Pointer Dereference Causes Denial of Service
Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0312
AI - closed7.5Ollama CVE-2024-12055: Ollama allows out-of-bounds read via crafted GGUF model
Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-12055
AI - closed9.6llama-cpp-python CVE-2024-34359: Llama-cpp-python remote code execution via Jinja2 chat templates
Patch now · Disclosed · since 13 May 2024 · updated 14 May 2024 · CVE-2024-34359
AI - closed8.8llama.cpp Heap-based buffer overflow in llama.cpp header.n_kv
Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-23605
AI - closed8.8llama.cpp Heap-based buffer overflow in llama.cpp info-ne
Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-21802
AI - closed8.8llama.cpp Heap-based buffer overflow in llama.cpp gguf_fread_str
Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-23496
AI