{"vulnerability": "cve-2024-39720", "sightings": [{"uuid": "8e13e3bb-148b-4d19-a624-13359b7c1bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39720", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mllqe756ol2v", "content": "Critical out-of-bounds read vulnerability (CVE-2024-39720) discovered in Ollama AI framework. Update to version 0.1.46 to mitigate risks. #CyberSecurity #AI #Ollama #Vulnerability Link: thedailytechfeed.com/critical-vul...", "creation_timestamp": "2026-05-11T16:53:01.636703Z"}, {"uuid": "367cd75d-8e71-43c4-bee4-f6e96ac56d01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39720", "type": "seen", "source": "MISP/9e6b1b0e-5fb2-46d6-9aaf-7c64a1324e40", "content": "", "creation_timestamp": "2025-09-24T00:43:17.000000Z"}, {"uuid": "653b4d7c-ff4b-489d-bf13-7c4cbac66bcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39720", "type": "seen", "source": "https://gist.github.com/vitaliysobur/f447fc26c0787121f1dd7c923623486f", "content": "", "creation_timestamp": "2026-02-21T14:07:01.000000Z"}, {"uuid": "43d7b2fe-beec-4292-8c5c-409f73aadcf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39720", "type": "seen", "source": "https://t.me/cvedetector/9537", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2024-39720 - Ollama HTTP Request Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2024-39720 \nPublished : Oct. 31, 2024, 8:15 p.m. | 37\u00a0minutes ago \nDescription : An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"31 Oct 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-10-31T21:57:43.000000Z"}]}