CVE-2026-110810: ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whispermodelload of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ggml-org/whisper.cppto a version that resolves this vulnerability.Fixed in 1.9.5Patch 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774
Event History
Frequently Asked Questions
Which deployments are affected?
ggml-org whisper.cpp versions up to and including 1.9.4 are affected. Version 1.9.5 mitigates the issue.
What does an attacker need to exploit this issue?
The attack must be initiated locally and requires low privileges. User interaction is also required.
Is exploitation practical?
A public exploit is available and may be used. The issue is triggered by manipulating the ttype argument handled by the Model Loader.
What should teams do if they use an affected version?
Upgrade whisper.cpp to version 1.9.5. The vendor patch is identified as 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774.