CVE-2025-66959

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder

Published Feb 6, 2026

https://github.com/ollama/ollama/issues/9820 https://zero.shotlearni.ng/blog/cve-2025-66959panic-dos-via-unchecked-length-in-gguf-decoder-copy/

CVSS ScoreHigh

8.7

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-66959

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder

Published Feb 6, 2026

https://github.com/ollama/ollama/issues/9820 https://zero.shotlearni.ng/blog/cve-2025-66959panic-dos-via-unchecked-length-in-gguf-decoder-copy/

CVSS ScoreHigh

8.7


golang	github.com/eino-contrib/ollama	v0.1.0
golang	github.com/ollama/ollama	v0.1.30
golang	github.com/ollama/ollama	v0.1.31-rc3
golang	github.com/ollama/ollama	v0.1.31
golang	github.com/ollama/ollama	v0.1.32-rc1
golang	github.com/ollama/ollama	v0.1.32-rc2
golang	github.com/ollama/ollama	v0.1.32
golang	github.com/ollama/ollama	v0.1.33-rc1
golang	github.com/ollama/ollama	v0.1.33-rc2
golang	github.com/ollama/ollama	v0.1.33-rc3
golang	github.com/ollama/ollama	v0.1.33-rc4
golang	github.com/ollama/ollama	v0.1.33-rc5
golang	github.com/ollama/ollama	v0.1.33-rc6
golang	github.com/ollama/ollama	v0.1.33-rc7
golang	github.com/ollama/ollama	v0.1.33
golang	github.com/ollama/ollama	v0.1.34-rc1
golang	github.com/ollama/ollama	v0.1.34
golang	github.com/ollama/ollama	v0.1.35-rc1
golang	github.com/ollama/ollama	v0.1.35
golang	github.com/ollama/ollama	v0.1.36
golang	github.com/ollama/ollama	v0.1.37
golang	github.com/ollama/ollama	v0.1.38
golang	github.com/ollama/ollama	v0.1.39-rc1
golang	github.com/ollama/ollama	v0.1.39-rc2
golang	github.com/ollama/ollama	v0.1.39
golang	github.com/ollama/ollama	v0.1.40-rc1
golang	github.com/ollama/ollama	v0.1.40
golang	github.com/ollama/ollama	v0.1.41
golang	github.com/ollama/ollama	v0.1.42
golang	github.com/ollama/ollama	v0.1.43
golang	github.com/ollama/ollama	v0.1.44
golang	github.com/ollama/ollama	v0.1.45-rc1
golang	github.com/ollama/ollama	v0.1.45-rc2
golang	github.com/ollama/ollama	v0.1.45-rc3
golang	github.com/ollama/ollama	v0.1.45-rc4
golang	github.com/ollama/ollama	v0.1.45-rc5
golang	github.com/ollama/ollama	v0.1.45
golang	github.com/ollama/ollama	v0.1.46
golang	github.com/ollama/ollama	v0.1.47
golang	github.com/ollama/ollama	v0.1.48
golang	github.com/ollama/ollama	v0.1.49-rc10
golang	github.com/ollama/ollama	v0.1.49-rc11
golang	github.com/ollama/ollama	v0.1.49-rc12
golang	github.com/ollama/ollama	v0.1.49-rc13
golang	github.com/ollama/ollama	v0.1.49-rc14
golang	github.com/ollama/ollama	v0.1.49-rc1
golang	github.com/ollama/ollama	v0.1.49-rc2
golang	github.com/ollama/ollama	v0.1.49-rc3
golang	github.com/ollama/ollama	v0.1.49-rc4
golang	github.com/ollama/ollama	v0.1.49-rc5

Ecosystem	Package	Version


golang	github.com/eino-contrib/ollama	v0.1.0
golang	github.com/ollama/ollama	v0.1.30
golang	github.com/ollama/ollama	v0.1.31-rc3
golang	github.com/ollama/ollama	v0.1.31
golang	github.com/ollama/ollama	v0.1.32-rc1
golang	github.com/ollama/ollama	v0.1.32-rc2
golang	github.com/ollama/ollama	v0.1.32
golang	github.com/ollama/ollama	v0.1.33-rc1
golang	github.com/ollama/ollama	v0.1.33-rc2
golang	github.com/ollama/ollama	v0.1.33-rc3
golang	github.com/ollama/ollama	v0.1.33-rc4
golang	github.com/ollama/ollama	v0.1.33-rc5
golang	github.com/ollama/ollama	v0.1.33-rc6
golang	github.com/ollama/ollama	v0.1.33-rc7
golang	github.com/ollama/ollama	v0.1.33
golang	github.com/ollama/ollama	v0.1.34-rc1
golang	github.com/ollama/ollama	v0.1.34
golang	github.com/ollama/ollama	v0.1.35-rc1
golang	github.com/ollama/ollama	v0.1.35
golang	github.com/ollama/ollama	v0.1.36
golang	github.com/ollama/ollama	v0.1.37
golang	github.com/ollama/ollama	v0.1.38
golang	github.com/ollama/ollama	v0.1.39-rc1
golang	github.com/ollama/ollama	v0.1.39-rc2
golang	github.com/ollama/ollama	v0.1.39
golang	github.com/ollama/ollama	v0.1.40-rc1
golang	github.com/ollama/ollama	v0.1.40
golang	github.com/ollama/ollama	v0.1.41
golang	github.com/ollama/ollama	v0.1.42
golang	github.com/ollama/ollama	v0.1.43
golang	github.com/ollama/ollama	v0.1.44
golang	github.com/ollama/ollama	v0.1.45-rc1
golang	github.com/ollama/ollama	v0.1.45-rc2
golang	github.com/ollama/ollama	v0.1.45-rc3
golang	github.com/ollama/ollama	v0.1.45-rc4
golang	github.com/ollama/ollama	v0.1.45-rc5
golang	github.com/ollama/ollama	v0.1.45
golang	github.com/ollama/ollama	v0.1.46
golang	github.com/ollama/ollama	v0.1.47
golang	github.com/ollama/ollama	v0.1.48
golang	github.com/ollama/ollama	v0.1.49-rc10
golang	github.com/ollama/ollama	v0.1.49-rc11
golang	github.com/ollama/ollama	v0.1.49-rc12
golang	github.com/ollama/ollama	v0.1.49-rc13
golang	github.com/ollama/ollama	v0.1.49-rc14
golang	github.com/ollama/ollama	v0.1.49-rc1
golang	github.com/ollama/ollama	v0.1.49-rc2
golang	github.com/ollama/ollama	v0.1.49-rc3
golang	github.com/ollama/ollama	v0.1.49-rc4
golang	github.com/ollama/ollama	v0.1.49-rc5

Find vulnerabilities. Fix fast with AI.

CVE-2025-66959

CVE-2025-66959