CVE-2026-10298mediumCWE-404CWE-476

CVE-2026-10298: medium-severity vulnerability in ggml-org whisper.cpp

ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference

Published · Updated

Follow this CVE+ Monitor whisper.cpp+ Monitor whisper.cpp

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 4.8epss 0.1%
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
ggml-org · whisper.cpp
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — ggml-org whisper.cpp

In the same product, most dangerous first.

CVE-2026-17512MEDIUMggml-org whisper.cpp log_mel_spectrogram out-of-boundsEPSS 0.2%CVE-2026-17513MEDIUMggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertionEPSS 0.2%CVE-2025-14569MEDIUMggml-org whisper.cpp common-whisper.cpp read_audio_data use after freeEPSS 0.1%CVE-2026-110810LOWggml-org whisper.cpp Model Loader whisper_model_load out-of-boundsEPSS 0.1%