Ollama out-of-bounds read vulnerability allows remote process memory leak
Ollama versions before 0.17.1 contain a heap out-of-bounds read vulnerability in the GGUF model loader that could be used to leak the entire process memory. The vulnerability is tracked as CVE-2026-7482 and has a CVSS score of 9.1. The source states that it likely affects more than 300,000 servers globally.
CERT24