Skip to main content
Version: v1.4.x

CVE-2025-0315

CVE Details​

Visit the official vulnerability details page for CVE-2025-0315 to learn more.

Initial Publication​

03/20/2025

Last Update​

06/17/2026

Third Party Dependency​

github.com/ollama/ollama

NIST CVE Summary​

A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.

CVE Severity​

7.5

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

Status​

Analyzed

Affected Products & Versions​

VersionPaletteAIPaletteAI VerteX
1.4.2⚠️ Impacted⚠️ Impacted

Revision History​

No revisions available.