Skip to content
fr Sign in
8.7 High

CVE-2025-15514 Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal…

Description

Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data represents valid media before passing it to the mtmd_helper_bitmap_init_from_buf function. This function can return NULL for malformed input, but the code does not check this return value before dereferencing the pointer in subsequent operations. A remote attacker can exploit this by sending specially crafted base64 image data that decodes to invalid media, causing a segmentation fault and crashing the runner process. This results in a denial of service condition where the model becomes unavailable to all users until the service is restarted.

Affected products and versions

Product Affected versions Fixed in
Ollama 0.11 0.11.5-rc0 → 0.13.5 No fix stated
Red Hat OpenShift AI (RHOAI) Versions not published
Red Hat Ansible Automation Platform 2 Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Ollama

The 14 CVEs of Ollama →
CVE-2026-103663 Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by… 6.9 Medium CVE-2026-102697 Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode… 8.5 High CVE-2026-85180 Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to… 8.7 High CVE-2026-65315 Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows… 8.7 High
Track this CVE