Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-10298

Опубликовано: 01 июн. 2026
Источник: nvd
CVSS3: 3.3
CVSS2: 1.7
EPSS Низкий

Описание

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 2%
0.00112
Низкий

3.3 Low

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-404

Связанные уязвимости

CVSS3: 3.3
ubuntu
3 месяца назад

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVSS3: 3.3
debian
3 месяца назад

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8. ...

CVSS3: 3.3
github
3 месяца назад

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 2%
0.00112
Низкий

3.3 Low

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-404