CVE-2026-17513

A flaw was found in whisper.cpp, a library for machine learning. A local attacker can exploit a vulnerability in the ggmlftypetoggmltype function by manipulating the ftype argument. This manipulation leads to a reachable assertion, which can cause the application to terminate, resulting in a Deni...

CVE-2026-17512

A flaw was found in whisper.cpp. A local attacker can exploit an out-of-bounds read vulnerability in the logmelspectrogram function. This flaw could lead to the disclosure of sensitive information...

CVE-2026-17512

The CVE-2026-17512 entry concerns ggml-org whisper.cpp (version 1.8.4-58). The vulnerability affects the function log_mel_spectrogram in src/whisper.cpp and enables an out-of-bounds read. Access is locally exploitable, requiring that the attacker run code on the affected host. A pull request to f...

CVE-2026-10298

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whispermodelload of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the whispermodelload function of ggml.c. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation There is no fixed version for whisper-cpp...

CVE-2026-10298

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whispermodelload of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and...

Linux Distros Unpatched Vulnerability : CVE-2025-14569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. T...

whisper.cpp 资源管理错误漏洞

whisper.cpp is a C language library open-sourced by ggml. A resource management error vulnerability exists in whisper.cpp version 1.8.2, which stems from a post-release reuse of the function readaudiodata in file /whisper.cpp/examples/common-whisper.cpp...