THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2025-15514 (HIGH 7.5) — Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data

[NVD] CVE-2025-15514 (HIGH 7.5) — Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data

lownvdPublished 2026-01-12

CVE-2025-15514 CVSS: 7.5 HIGH Published: 2026-01-12T23:15:51.957

Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model image processing functionality. When processing base64-encoded image data via the /api/chat endpoint, the application fails to validate that the decoded data represents valid media before passing it to the mtmd_

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-15514