Approved changes feed: RSS · Atom

cpe:2.3:a:ggml-org:whisper.cpp:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGgml Org (bde0791b-4b93-5ec4-904d-16d7f7df04c0)
ProductWhisper.Cpp (32252eac-786f-50c1-ae48-3c68ee64ea70)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-10298 vulnerable 2026-06-08 07:47:13.799935 ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference
LOW (3.3)
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2026-06-01T22:30:10.751Z
Updated: 2026-06-02T15:45:34.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14569 vulnerable 2026-06-08 07:06:34.719056 ggml-org whisper.cpp common-whisper.cpp read_audio_data use after free
MEDIUM (5.3)
A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Published: 2025-12-12T18:02:09.274Z
Updated: 2025-12-12T19:22:15.061Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.