CVE-2026-86289 | Ollama up to 0.31.1 GGUF Decoder fs/ggml/gguf.go readGGUFV1String integer overflow (Issue 17033)

SecurityVulns
Yanac

A vulnerability classified as problematic has been found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow.

This vulnerability is reported as CVE-2026-86289. The attack is possible to be carried out remotely. Moreover, an exploit is present.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More