Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-17512 1 Ggml-org 1 Whisper.cpp 2026-07-27 3.3 Low
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.
CVE-2026-17513 1 Ggml-org 1 Whisper.cpp 2026-07-27 3.3 Low
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.
CVE-2026-10298 2 Ggml, Ggml-org 2 Whisper.cpp, Whisper.cpp 2026-06-02 3.3 Low
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.