PYSEC-2025-144

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/ollama/PYSEC-2025-144.yaml

JSON Data

https://api.osv.dev/v1/vulns/PYSEC-2025-144

Aliases

Withdrawn

2026-06-10T11:00:00Z

Published

2025-03-20T10:15:40.757Z

Modified

2026-06-10T12:00:05.495083157Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for block_count in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.

References

https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9

Affected packages

PyPI / ollama

Package

Name: ollama; View open source insights on deps.dev
Purl: pkg:pypi/ollama

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

0.3.3

Affected versions

0.*

0.0.0

0.0.1

0.1.0

0.1.2

0.1.3

0.1.4

0.1.5

0.1.6

0.1.7

0.1.8

0.1.9

0.2.0

0.2.1

0.3.0

0.3.1

0.3.2

0.3.3

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/ollama/PYSEC-2025-144.yaml"