README.md

metadata

license: mit
tags:
  - gguf
  - security-research

Security Research PoC - Ollama GGUF Integer Overflow

This repository contains a proof-of-concept GGUF model for a security vulnerability disclosure via huntr.com.

Files

• ollama_overflow.gguf - Malicious GGUF with overflowing tensor dimensions
• generate_poc.py - Generator for payload gguf

Reproduction

python3 generate_poc.py
ollama create test -f Modelfile  # Modelfile: FROM ./ollama_overflow.gguf