Tagged "vulnerability"

5 articles tagged vulnerability, 21 April 2026 to 27 May 2026. Newest first.

• llama.cpp GGUF Parser Flaws: Critical Integer Overflow Enables Arbitrary Reads in Every Local AI Stack 27 May 2026

  A critical security vulnerability discovered in llama.cpp's GGUF parser threatens the integrity of local LLM deployments. The flaw allows attackers to read arbitrary memory through malicious model files.

• Critical Out-of-Bounds Read Vulnerability Discovered in Ollama 15 May 2026

  A significant security vulnerability (CVE-2026-7482) has been identified in Ollama, affecting local LLM deployments. Users running self-hosted Ollama instances should prioritize updating to patched versions.

• Ollama Vulnerability Exposes Remote Process Memory 12 May 2026

  A security vulnerability in Ollama has been disclosed that can expose remote process memory, highlighting important security considerations for users deploying Ollama locally or in networked environments.

• Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak 11 May 2026

  A critical vulnerability in Ollama's GGUF parser enables remote attackers to read sensitive process memory, potentially exposing model weights and user data. This vulnerability affects all versions of Ollama and requires immediate patching for production deployments.

• Malicious GGUF Models Could Trigger Remote Code Execution on SGLang Servers 21 April 2026

  Security researchers have identified a critical vulnerability where specially crafted GGUF model files can achieve remote code execution on SGLang inference servers, posing significant risks to organizations running local LLM deployments.