CVE-2026-17512

Summary

A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.

Affected Software

Weaknesses

• CWE-125: Out-of-Bounds Read
• CWE-119: Memory Corruption

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/vuln/383382
• https://vuldb.com/vuln/383382/cti
• https://vuldb.com/cve/CVE-2026-17512
• https://vuldb.com/submit/798905
• https://github.com/ggml-org/whisper.cpp/issues/3923
• https://github.com/ggml-org/whisper.cpp/pull/3925
• https://github.com/ggml-org/whisper.cpp/

• ←Previous
• Next→