GitHub Advisoryadvisory · Go

GHSA-2xf2-gjm6-g2c6 Ollama Divide by Zero Vulnerability

HIGH Published 2025-03-20 Modified 2026-06-06 Official page ↗
Aliases
CVE-2024-8063
Ecosystem
Go
Packages
github.com/ollama/ollama
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-369
Reviewed
2025-05-15

Affected packages

• Go github.com/ollama/ollama: <= 0.3.3 (no fix yet)

Description

A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for `block_count` in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.

Related

Alias · CVE (1)

  • CVE-2024-8063 A divide by zero vulnerability exists in ollama/ollama version v0.3.3. vulnerability

Weakness · CWE (1)

References