{"data":{"id":"c819b43c-990f-424b-9f1a-4508d479bfa7","title":"CVE-2026-7482: Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create…","summary":"CVE-2026-7482 affects Ollama before 0.17.1. A heap out-of-bounds read in the GGUF model loader lets an attacker send a crafted GGUF file to the /api/create endpoint, where declared tensor offset and size exceed the file's real length. During quantization in fs/ggml/gguf.go and server/quantization.go (WriteTo()), the server reads past the allocated heap buffer, and the leaked memory may include environment variables, API keys, system prompts and other users' conversation data. The attacker can exfiltrate it by pushing the resulting model artifact through /api/push to an attacker-controlled registry, and neither endpoint requires authentication in the upstream distribution.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7482","publishedAt":"2026-05-04T13:16:01.727Z","cveId":"CVE-2026-7482","cweIds":["CWE-125"],"cvssScore":"9.1","cvssSeverity":"critical","severity":"critical","attackType":["data_extraction","pii_leakage"],"issueType":"vulnerability","affectedPackages":["github.com/ollama/ollama@< 0.17.1 (fixed: 0.17.1)"],"affectedPackageNames":["github.com/ollama/ollama"],"affectedPackageRefs":["go:github.com/ollama/ollama"],"affectedVendors":[],"affectedVendorsRaw":["Ollama"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Ollama heap out-of-bounds read in GGUF model loader via /api/create","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.02241,"epssCheckedAt":"2026-11-10T00:11:23.264Z","kevDateAdded":null,"advisoryAliases":["GHSA-x8qc-fggm-mpqg"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:48:56.561Z","patchAvailable":true,"disclosureDate":"2026-05-04T13:16:01.727Z","fixReleasedAt":"2026-02-25T23:29:55.000Z","daysToFix":-68,"fixCheckedAt":"2026-10-29T21:37:03.473Z","capecIds":["CAPEC-540"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"go","name":"github.com/ollama/ollama","fixedVersion":"0.17.1","matchedVersion":"v0.17.1","fixReleasedAt":"2026-02-25T23:29:55.000Z","daysToFix":-68,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:37:03.327Z"}]}}