EUVD-2026-49313
GHSA-hqg6-4q5h-9ggc
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessLocal shell access
-
DeliveryExecute whisper.cpp with crafted ftype argument
-
ExploitTrigger assertion in ggml_ftype_to_ggml_type
-
ExecutionProcess crash
-
ImpactDenial of service
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V16 - Security Logging and Error Handling Reachable assertion handling
|
| Exploitation Conditions | The attacker must have local access to the system and be able to execute the whisper.cpp binary with command-line arguments. No special configuration beyond default installation is required. The attack does not require authentication beyond standard shell access, though it does require low-privileged user credentials (PR:L). The attacker cannot affect confidentiality or integrity; only availability is impacted. |
| Impact | CVSS 4.0 base score 4.8 (medium) with local attack vector and low privileges required. EPSS data not provided; no mention in CISA KEV. Without patch or exploit code, real-world exploitation risk is low for most deployments. The local requirement and limited impact (availability only) reduce priority. However, in environments where whisper.cpp is exposed to untrusted local users (e.g., shared servers), targeted denial of service is possible. |
| Exploit ScenarioDerived | A local attacker with user access on a system where whisper.cpp is installed runs the binary with a crafted --ftype argument, causing the ggml_ftype_to_ggml_type assertion to fail. This crashes the process, denying service to other users or applications relying on whisper.cpp. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 27, 2026
Local denial of service in ggml-org whisper.cpp 95ea8f9b via reachable assertion in ggml_ftype_to_ggml_type function. A local attacker with low privileges can cause a crash by supplying an invalid ftype argument. No public exploit identified; no patch available as vendor has not responded to issue report.
RemediationAI
No vendor-released patch identified at time of analysis. The project has been informed via issue report but has not responded. Until a fix is available, apply input validation to the ftype argument or restrict local access to the whisper.cpp binary to trusted users only. Monitor the issue tracker (https://github.com/ggml-org/whisper.cpp/issues/3924) for updates.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
whisper.cpp is a C++ port of OpenAI's Whisper speech recognition model using the ggml tensor library. The function ggml_ftype_to_ggml_type converts file type integers to ggml tensor types. CWE-617 indicates a reachable assertion where the program terminates unexpectedly when input validation fails, leading to denial of service. The affected product is identified by CPE cpe:2.3:a:ggml-org:whisper.cpp:*:*:*:*:*:*:*:*.
Know when Whisper Cpp gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Local access, low privileges, availability only.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
More in Whisper Cpp
View allNull pointer dereference in whisper.cpp up to version 1.8.2 allows a local authenticated attacker to crash the applicati
An out-of-bounds read in ggml-org whisper.cpp through version 1.9.4 lets a local attacker crash the application by getti
Local attackers with low privileges can trigger an out-of-bounds read in whisper.cpp 1.8.4-58 by supplying a very short
Exploit-DB