Heap Out-of-Bounds Read Vulnerability in Ollama by Ollama

CVE-2026-7482

What is CVE-2026-7482?

The Ollama application is susceptible to a heap out-of-bounds read vulnerability within its GGUF model loader. This issue arises when the /api/create endpoint processes an attacker-defined GGUF file where the tensor offset and size exceed the file’s actual length. During quantization, the server inadvertently reads past the buffer allocated in memory, which can expose sensitive data such as environment variables, API keys, and user conversation data. Moreover, an attacker can exploit this vulnerability by uploading the resulting model artifact to a registry they control via the /api/push endpoint. Notably, the lack of authentication for these endpoints exacerbates the risk, especially considering that many default configurations expose the application to the public internet.

References