Is there a public PoC exploit available for CVE-2026-10298?

Yes, a public proof-of-concept exploit is available for CVE-2026-10298. Prioritise patching immediately. EPSS: 0.0%.

whisper.cpp CVE-2026-10298

Q: What is the CVSS score of CVE-2026-10298?

CVE-2026-10298 has a CVSS 4.0 base score of 1.9 (Low). CVSS vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-33831 LOW

NULL Pointer Dereference (CWE-476)

2026-06-01 VulDB

GHSA-jx42-8f9x-g57f

Denial Of Service Null Pointer Dereference Whisper Cpp Ggml Org

1.9

CVSS 4.0 · Vendor: VulDB

Severity by source

Vendor (VulDB) PRIMARY

1.9 LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (VulDB) · only source for this CVE.

CVSS VectorVendor: VulDB

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jun 01, 2026 - 23:30 vuln.today

CVSS changed

Jun 01, 2026 - 23:22 NVD

3.3 (LOW) 1.9 (LOW)

DescriptionCVE.org

A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation results in null pointer dereference. Attacking locally is a requirement. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

AnalysisAI

Null pointer dereference in whisper.cpp up to version 1.8.2 allows a local authenticated attacker to crash the application via a crafted input during model loading. The vulnerable code path is the whisper_model_load function within ggml/src/ggml.c, resulting in a limited availability impact (application denial of service) with no confidentiality or integrity consequences. A proof-of-concept exploit is publicly available via a GitHub issue report; however, no vendor patch has been released and the project has not yet responded to the disclosure.

Technical ContextAI

whisper.cpp (CPE: cpe:2.3:a:ggml-org:whisper.cpp:*:*:*:*:*:*:*:*) is an open-source C/C++ inference library implementing OpenAI's Whisper speech-to-text model using ggml, a low-level tensor computation backend. The root cause is CWE-476 (NULL Pointer Dereference): the function whisper_model_load in ggml/src/ggml.c dereferences a pointer without first validating it against NULL, a classic memory safety error in C codebases that lack bounds or null guards. This class of bug typically arises from missing error-checking after memory allocation or data parsing routines return NULL on failure conditions such as malformed or truncated model files.

RemediationAI

No vendor-released patch has been identified at time of analysis. The ggml-org project was notified via a GitHub issue report (https://github.com/ggml-org/whisper.cpp/issues/3807) but has not responded. Until a patched release is available, defenders should apply the following specific compensating controls: restrict execution of the whisper.cpp binary or any application embedding it to only trusted, authorized users via OS-level access controls (e.g., chmod, RBAC, sudo policies) to prevent low-privilege local users from triggering the crash; validate that model files provided to the application originate from trusted sources and match expected checksums before passing them to the model loading function; and consider running whisper.cpp within a sandboxed environment (e.g., containers, systemd sandboxing with ProtectSystem/PrivateTmp) to contain the impact of a crash. The primary trade-off of sandbox isolation is operational overhead and potential integration complexity. Monitor the upstream repository at https://github.com/ggml-org/whisper.cpp/ for a patched release.