Vulnerability Reportollama/ollama:0.34.2-rocm

This image carries significant risk; production deployment is highly discouraged without strict compensating controls. Although the highest exposed severity is 6.46 and no exposed findings reach severity 7.0, there are 43 exposed findings at severity 6.0 or higher, and the top issues include memory corruption in elfutils and an out-of-bounds write in pcre2 (CVE-2025-1352, CVE-2026-103111). An attacker able to feed crafted input to the Ollama service or its dependencies could potentially crash the service, corrupt memory, or cause denial of service. Restricting network access to the Ollama API with strict network policies would fully eliminate the remote exploitation paths for these exposed findings. Note that CVE-2026-103111 only applies when attacker-controlled regex is processed with certain JIT API usage.