Low severity · published Jun 1, 2026
CVE-2026-10298
ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference
3.3
CVSS
0.1%
EPSS
No
On KEV
Description
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 1% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WH
whisper.cpp · ggml-org
1.8.0; 1.8.1; 1.8.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-10298
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-10298
github.com
https://github.com/ggml-org/whisper.cpp/
github.com
https://github.com/ggml-org/whisper.cpp/issues/3807
vuldb.com
https://vuldb.com/cve/CVE-2026-10298
vuldb.com
https://vuldb.com/submit/826910
vuldb.com
https://vuldb.com/vuln/367591
vuldb.com
https://vuldb.com/vuln/367591/cti
More from whisper.cpp
5.3
CVE-2025-14569
ggml-org whisper.cpp common-whisper.cpp read_audio_data use after free
3.3
CVE-2026-17513
ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion
3.3
CVE-2026-17512
ggml-org whisper.cpp log_mel_spectrogram out-of-bounds
2.8
CVE-2026-110810
ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds