CVE-2026-110810 | ggml-org whisper.cpp up to 1.9.4 Model Loader src/whisper.cpp whisper_model_load ttype out-of-bounds (Issue 4090)

A vulnerability classified as problematic has been found in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read.

This vulnerability is cataloged as CVE-2026-110810. The attack must be initiated from a local position. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More