CVE-2026-110810
LowCVSS 2.8Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4, affecting the function whisper_model_load in src/whisper.cpp (Model Loader component). Manipulation of the ttype argument results in an out-of-bounds read; the attack requires local access and the exploit is now public.
Risk Assessment
A local attacker can use the publicly available exploit to read out-of-bounds memory, potentially disclosing information or crashing the application.
Recommendation
Upgrade whisper.cpp to version 1.9.5 or later, which contains the fix (commit 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774).
Other vulnerabilities in whisper.cpp
See all- CVE-2026-17513Low
A vulnerability in ggml-org whisper.cpp (commit 95ea8f9b) in the function ggml_ftype_to_ggml_type in file ggml/src/ggml.c. Manipulation of the ftype argument leads to a reachable assertion. Local access is required. The project has not responded yet.
- CVE-2026-17512Low
A vulnerability in ggml-org whisper.cpp 1.8.4-58 in the function log_mel_spectrogram in file src/whisper.cpp. Manipulation leads to an out-of-bounds read. Local access is required. A pull request with a fix is pending acceptance.
- CVE-2026-10298Low
In whisper.cpp up to version 1.8.2, a vulnerability in the whisper_model_load function in ggml/src/ggml.c leads to null pointer dereference. Local access is required, and the exploit is publicly available. The project has not responded.
- CVE-2025-14569Medium
A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Original NVD description (English source)
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS