Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-110810— ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds

Quick assessment

Affected
ggml-org whisper.cpp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 ggml-org 的 whisper.cpp（版本 ≤ 1.9.4）中发现了一个漏洞。该漏洞影响组件“模型加载器（Model Loader）”中 src/whisper.cpp 文件里的 whisper_model_load 函数。通过对参数 ttype 进行操纵，可导致越界读取（out-of-bounds read）。此漏洞的攻击必须由本地触发。目前该漏洞利用代码已公开，可能被恶意利用。升级到版本 1.9.5 可缓解此问题。修复补丁的提交哈希为 60c0be6ac8fa71b1a2ae2dd938a31a34

CVSS 2.8 · Low

Possible ATT&CK Techniques 1 AI

T1200 · Hardware Additions
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-110810

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
ggml-org whisper.cpp 1.9.0 cpe:2.3:a:ggml-org:whisper.cpp:*:*:*:*:*:*:*:*

II. Public POCs for CVE-2026-110810

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-110810

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-110810 (2)

Other References for CVE-2026-110810 (2)

IV. Related Vulnerabilities

Same product: whisper.cpp
Same vendor: ggml-org
Same weakness: CWE-125

V. Comments for CVE-2026-110810

No comments yet

Leave a comment