-
CVSS Score
-The vulnerability description explicitly identifies the 'ggufPadding' function as the location of the division-by-zero error. While the exact file path is not provided in the advisory, GGUF model handling logic in the Ollama codebase is likely located in a file like 'llm/gguf.go' based on standard project structure conventions. The function's role in processing model files and the direct reference to it in the CVE description justify high confidence in its vulnerability.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/ollama/ollama | go |
Ongoing coverage of React2Shell