CVE-2026-10298
ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference
- State
- Published
- Severity
- 4.8 Medium
- Published
- Jun 1, 2026
- Updated
- Jun 2, 2026
- Reserved
- May 31, 2026
Description
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 4.8 Medium | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 3.3 Low | CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 1.7 Low | AV:L/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
whisper.cppggml-org |
|
References
- VDB-367591 | ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereferencevdb-entrytechnical-description
- VDB-367591 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
- CVE-2026-10298 | CVE Analysis and Reportthird-party-advisory
- Submit #826910 | ggml-org whisper.cpp ≤ 1.8.2 (confirmed on HEAD as of 2026-05-12) NULL Pointer Dereferencethird-party-advisory
- https://github.com/ggml-org/whisper.cpp/issues/3807exploitissue-tracking
- https://github.com/ggml-org/whisper.cpp/product
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.