High severity7.5NVD Advisory· Published Mar 20, 2025· Updated Jun 17, 2026
CVE-2024-8063
CVE-2024-8063
Description
A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The vulnerability occurs when importing GGUF models with a crafted type for block_count in the Modelfile. This can lead to a denial of service (DoS) condition when the server processes the model, causing it to crash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/ollama/ollamaGo | <= 0.3.3 | — |
Affected products
9- osv-coords7 versionspkg:apk/chainguard/k8sgptpkg:apk/chainguard/modspkg:apk/chainguard/ollama-fipspkg:apk/wolfi/k8sgptpkg:apk/wolfi/modspkg:golang/github.com/ollama/ollamapkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed
< 0+ 6 more
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r14
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 1.8.1-r14
- (no CPE)range: <= 0.3.3
- (no CPE)range: < 0.0.20250515T200012-1.1
Patches
Vulnerability mechanics
References
5- huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9nvdExploitThird Party AdvisoryWEB
- github.com/advisories/GHSA-2xf2-gjm6-g2c6ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-8063ghsaADVISORY
- github.com/ollama/ollama/issues/8020ghsaWEB
- github.com/pypa/advisory-database/tree/main/vulns/ollama/PYSEC-2025-144.yamlghsaWEB
News mentions
0No linked articles in our index yet.