CVE-2026-17512— ggml-org whisper.cpp log_mel_spectrogram out-of-bounds
Quick assessment
Affected
ggml-org whisper.cpp
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ggml whisper.cpp是ggml组织开源的一个C语言库。 whisper.cpp 1.8.4-58版本存在缓冲区错误漏洞，该漏洞源于文件src/whisper.cpp中的log_mel_spectrogram函数存在越界读取问题。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| ggml-org | whisper.cpp | 1.8.4-58 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-17512
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
ggml-org whisper.cpp log_mel_spectrogram out-of-bounds
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Vulnerability Title
ggml whisper.cpp 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ggml whisper.cpp是ggml组织开源的一个C语言库。 whisper.cpp 1.8.4-58版本存在缓冲区错误漏洞，该漏洞源于文件src/whisper.cpp中的log_mel_spectrogram函数存在越界读取问题。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| ggml-org | whisper.cpp | 1.8.4-58 |
cpe:2.3:a:ggml-org:whisper.cpp:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-17512
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-17512
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-17512 (1)
News Coverage for CVE-2026-17512 (1)
Other References for CVE-2026-17512 (3)
-
🔗 VulDB | Security Check third-party-advisory
-
-
🔗 VulDB | Security Check third-party-advisory
Same Patch Batch · ggml-org · 2026-07-27 · 4 CVEs total
| CVE-2026-17501 | 5.3 MEDIUM | ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform rec |
| CVE-2026-17500 | 5.3 MEDIUM | ggml-org llama.cpp json-schema-to-grammar.cpp _visit_pattern null pointer dereference |
| CVE-2026-17513 | 3.3 LOW | ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion |
IV. Related Vulnerabilities
Same product: whisper.cpp
-
CVE-2026-110810
ggml-org whisper.cpp Model Loader whisper_model_load out-of- -
CVE-2026-17513
ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertio -
CVE-2026-10298
ggml-org whisper.cpp ggml.c whisper_model_load null pointer -
CVE-2025-14569
ggml-org whisper.cpp common-whisper.cpp read_audio_data use
Same vendor: ggml-org
-
CVE-2026-110810
ggml-org whisper.cpp Model Loader whisper_model_load out-of- -
CVE-2026-107183
llama.cpp before b11393 Use-After-Free via common_chat_peg_m -
CVE-2026-86317
ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tenso -
CVE-2026-78148
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_comput -
CVE-2026-78147
ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_
Same weakness: CWE-125
-
CVE-2026-111677
Antiword through 0.37 Heap Out-of-Bounds Read via vGet8LstIn -
CVE-2026-111678
Antiword through 0.37 Stack Out-of-Bounds Read via prop8.c F -
CVE-2026-49868
RIOT: DHCPv6 client _parse_reply() missing sub-option length -
CVE-2026-68906
libIEC61850: Infinite loop and out-of-bounds read in ACSE pa -
CVE-2026-68907
libIEC61850: Server-side out-of-bounds stack read in associa
V. Comments for CVE-2026-17512
No comments yet