affected:
- ecosystem_specific: {}
  package:
    ecosystem: PyPI
    name: ollama
    purl: pkg:pypi/ollama
  ranges:
  - events:
    - introduced: '0'
    - last_affected: 0.3.3
    type: ECOSYSTEM
  versions:
  - 0.0.0
  - 0.0.1
  - 0.1.0
  - 0.1.2
  - 0.1.3
  - 0.1.4
  - 0.1.5
  - 0.1.6
  - 0.1.7
  - 0.1.8
  - 0.1.9
  - 0.2.0
  - 0.2.1
  - 0.3.0
  - 0.3.1
  - 0.3.2
  - 0.3.3
aliases:
- CVE-2024-8063
details: A divide by zero vulnerability exists in ollama/ollama version v0.3.3. The
  vulnerability occurs when importing GGUF models with a crafted type for `block_count`
  in the Modelfile. This can lead to a denial of service (DoS) condition when the
  server processes the model, causing it to crash.
id: PYSEC-2025-144
modified: '2026-05-21T14:54:36.464298Z'
published: '2025-03-20T10:15:40.757Z'
withdrawn: '2026-06-10T11:00:00Z'
references:
- type: EVIDENCE
  url: https://huntr.com/bounties/fd8e1ed6-21d2-4c9e-8395-2098f11b7db9
severity:
- score: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  type: CVSS_V3