Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

Kurzinfo

Metadaten

  • Original (extern): Link oeffnen
  • Veroeffentlicht: 2026-05-10 12:41 UTC
  • Importiert: 2026-05-19 04:34 UTC
  • CVSS: 9.1
  • Quelle-ID: thn_global
  • uid_hash: 3a25be1cfc74feb5e55e16d0b34d3371ff8379c17c728805599759d364c84207

Inhalt

Cybersecurity researchers have disclosed a critical security vulnerability in Ollama that, if successfully exploited, could allow a remote, unauthenticated attacker to leak its entire process memory. The out-of-bounds read flaw, which likely impacts over 300,000 servers globally, is tracked as CVE-2026-7482 (CVSS score: 9.1). It has been codenamed Bleeding Llama by Cyera. Ollama is a

Verknuepfte CVEs

CVE-ID Severity (Quelle) CVSS (Quelle) Severity (CVE.org) CVSS (CVE.org) EPSS EPSS-Pctl Veroeffentlicht (CVE.org)

CVE-2026-7482

CRITICAL

9.1

CRITICAL

9.1

2026-05-04

Quellen-Details

Bezeichnung Name Kategorie Tags Zielgruppe Sprache Feed-URL
The Hacker News

thn_global

security_news - de https://feeds.feedburner.com/TheHackersNews