CVE-2026-110810
Deferred Deferred - Pending Action

Out-of-Bounds Read in whisper.cpp Model Loader

Publication date: 2026-10-15

Last updated on: 2026-10-15

Assigner: VulDB

Description
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-15
Last Modified
2026-10-15
Generated
2026-10-19
AI Q&A
2026-10-15
EPSS Evaluated
2026-10-18
NVD
CVE-2026-110810
EUVD
EUVD-2026-101800

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
ggml-org whisper.cpp 1.9.0
ggml-org whisper.cpp 1.9.1
ggml-org whisper.cpp 1.9.2
ggml-org whisper.cpp 1.9.3
ggml-org whisper.cpp 1.9.4

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-125 The product reads data past the end, or before the beginning, of the intended buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an out-of-bounds read in ggml-org whisper.cpp up to version 1.9.4. It occurs in the whisper_model_load function when the ttype argument is manipulated, causing the function to read memory outside valid bounds. The issue arises because the ttype value, read from model files, is used as an index into the type_traits array without validation. This can lead to crashes or unintended behavior when processing maliciously crafted model files.

Detection Guidance

Detect this vulnerability by checking the whisper.cpp version in use. If it is below 1.9.5, the system is vulnerable. Commands: git log --oneline | grep 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774 for patch verification or whisper-cli --version to check installed version.

Impact Analysis

The impact includes potential crashes of applications using whisper.cpp, data leaks due to out-of-bounds memory reads, or unexpected behavior when processing audio files with corrupted model data. Since the attack requires a local position or a modified model file, users processing untrusted audio files are at risk. Upgrading to version 1.9.5 or later mitigates this issue.

Compliance Impact

This vulnerability, an out-of-bounds read due to unvalidated tensor type (ttype) in model files, could potentially lead to unauthorized data access or corruption if exploited. For GDPR, this may impact data integrity and confidentiality requirements. For HIPAA, it could risk protected health information exposure if audio data processed by whisper.cpp is compromised. However, the vulnerability requires local access and a crafted model file, limiting remote exploitation risks.

Mitigation Strategies

Upgrade whisper.cpp to version 1.9.5 or later immediately. This version includes the patch that validates the ttype field to prevent out-of-bounds reads. Follow the official release notes for installation instructions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-110810. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart