Ollama up to 0.31.1 GGUF Decoder fs/ggml/gguf.go readGGUFV1String integer overflow

Summaryinfo

A vulnerability classified as problematic was found in Ollama up to 0.31.1. Impacted is the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Executing a manipulation can lead to integer overflow. This vulnerability appears as CVE-2026-86289. The attack may be performed from remote. In addition, an exploit is available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability classified as problematic was found in Ollama up to 0.31.1. This vulnerability affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. The manipulation with an unknown input leads to a integer overflow vulnerability. The CWE definition for the vulnerability is CWE-190. The product performs a calculation that can produce an integer overflow or wraparound, when the logic assumes that the resulting value will always be larger than the original value. This can introduce other weaknesses when the calculation is used for resource management or execution control. As an impact it is known to affect availability.

The advisory is shared for download at github.com. This vulnerability was named CVE-2026-86289. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. Technical details and also a public exploit are known.

It is possible to download the exploit at github.com. It is declared as proof-of-concept.

Upgrading to version 0.31.2-rc1 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying the patch 67b6a1c2d45321e0cb3c04a18073f9818de7724b is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Name

• Ollama

Version

• 0.31.0
• 0.31.1

License

• open-source

Website

• Product: https://github.com/ollama/ollama/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #906136: Ollama <= 0.17.1 Integer Overflow (by m00dy)

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion