Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data vi…
Summary
Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data represents valid media before passing it to the mtmd_helper_bitmap_init_from_buf function. This function can return NULL for malformed input, but the code does not check this return value before dereferencing the point…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
Lint boundary warnings (2)
The following non-blocking warnings were raised during the lint phase of this triage (e.g. reference URLs not yet on the allowlist). They do not affect entry usability and are disclosed for transparency (see DR-002).
-
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://https://github.com/ollama/ollama -
REF_URL_NOT_ALLOWLISTEDurl not in allowlist: https://ollama.com/
Sources
- NVD DATABASE
Original Links
- https://https://github.com/ollama/ollama Product
- https://huntr.com/bounties/172df98b-07cd-41ea-a628-366f8cd525c0 Exploit
- https://ollama.com/ Product
- https://www.vulncheck.com/advisories/ollama-multi-modal-image-processing-null-pointer-dereference Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2025-15514
- https://bugzilla.redhat.com/show_bug.cgi?id=2428828
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-15514.json
Timeline
- nvd_ingest NVD