Skip to content
OpenAdvisories

Package · Debian

whisper.cpp

5 known vulnerabilities.

5 results · Feed

  • Low 2.8

    ggml-org whisper.cpp Model Loader whisper_model_load out-of-bounds

    A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack…

  • Low 3.3

    ggml-org whisper.cpp ggml.c ggml_ftype_to_ggml_type assertion

    A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project …

  • Low 3.3

    ggml-org whisper.cpp log_mel_spectrogram out-of-bounds

    A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this is…

  • Low 3.3

    ggml-org whisper.cpp ggml.c whisper_model_load null pointer dereference

    A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The expl…

  • Medium 5.3

    ggml-org whisper.cpp common-whisper.cpp read_audio_data use after free

    A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is n…