PT-2026-64907 · Ggml Org · Whisper.Cpp

M00Dy · CVE-2026-17513 · Published 2026-07-27 · Updated 2026-07-27

NVD

CVSS v2.0

1.7

Low

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:P

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml ftype to ggml type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.

Fix

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2026-17513

Affected Products

Whisper.Cpp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-17513 · Security Note
• https://github.com/ggml-org/whisper.cpp/issues/3924 · Note
• https://vuldb.com/cve/CVE-2026-17513 · Note
• https://github.com/ggml-org/whisper.cpp · Note
• https://vuldb.com/vuln/383383/cti · Note
• https://vuldb.com/submit/799055 · Note
• https://vuldb.com/vuln/383383 · Note