{"data":{"id":"ee052eb7-0e60-4cf8-95fd-16c94b459a5c","title":"CVE-2026-65315: Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows r","summary":"Ollama (a tool for running AI models locally) has a vulnerability in its GGUF metadata parser (the code that reads model file headers) that allows attackers to crash the server by uploading a specially crafted model file with fake size information. The parser doesn't check if the claimed sizes match the actual file, so it tries to allocate huge amounts of memory and crashes the entire server.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-65315","publishedAt":"2026-07-21T22:19:10.050Z","cveId":"CVE-2026-65315","cweIds":["CWE-789"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["denial_of_service"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Ollama"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-07-21T22:19:10.050Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null}}