ggml-org whisper.cpp vulnerabilities (CVE)

CVE records published for ggml-org whisper.cpp, newest first. Follow to get an email when a new one appears.

5 results
3.3Low
CVE-2026-17513

ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion

ggml-org whisper.cpp

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project …

3.3Low
CVE-2026-17512

ggml-org whisper.cpp log_mel_spectrogram out-of-bounds

ggml-org whisper.cpp

A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this is…