cybercrime.clubhttps://cybercrime.club/tags/gguf/Infrastructure security news for people who build infrastructure.Hugo -- gohugo.ioen-usTue, 19 May 2026 11:09:18 -0400Ollama CVE-2026-7482 'Bleeding Llama': Heap OOB Read in GGUF Loader Leaks Server Memory to Unauthenticated Attackershttps://cybercrime.club/posts/ollama-cve-2026-7482-bleeding-llama-gguf-heap-oob-read/Tue, 19 May 2026 11:09:18 -0400https://cybercrime.club/posts/ollama-cve-2026-7482-bleeding-llama-gguf-heap-oob-read/A heap out-of-bounds read in Ollama's GGUF model loader (CVE-2026-7482, CVSS 9.1) lets unauthenticated attackers exfiltrate server process memory — including API keys, env vars, system prompts, and other users' conversations — from an estimated 300,000+ exposed instances.vulnerabilities