CVE-2026-10298

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whispermodelload of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and...

NULL Pointer Dereference

Overview Affected versions of this package are vulnerable to NULL Pointer Dereference in the whispermodelload function of ggml.c. An attacker can cause a denial of service by triggering a null pointer dereference through local access. Remediation There is no fixed version for whisper-cpp...

CVE-2026-10298

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whispermodelload of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and...

Linux Distros Unpatched Vulnerability : CVE-2025-14569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function readaudiodata of the file /whisper.cpp/examples/common-whisper.cpp. T...

whisper.cpp 资源管理错误漏洞

whisper.cpp is a C language library open-sourced by ggml. A resource management error vulnerability exists in whisper.cpp version 1.8.2, which stems from a post-release reuse of the function readaudiodata in file /whisper.cpp/examples/common-whisper.cpp...