---
id: CVE-2026-110810
title: A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4
summary: >-
  A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects
  the function whisper_model_load of the file src/whisper.cpp of the component
  Model Loader. Performing a manipulation of the argument ttype results in
  out-of-b…
severity: low
cvss: 2.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L'
cwe:
  - CWE-119
  - CWE-125
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:27.600'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-110810'
references:
  - url: 'https://github.com/ggml-org/whisper.cpp/'
    label: cna@vuldb.com
  - url: >-
      https://github.com/ggml-org/whisper.cpp/commit/60c0be6ac8fa71b1a2ae2dd938a31a34a508e774
    label: cna@vuldb.com
  - url: 'https://github.com/ggml-org/whisper.cpp/issues/4090'
    label: cna@vuldb.com
  - url: 'https://github.com/ggml-org/whisper.cpp/pull/4091'
    label: cna@vuldb.com
  - url: 'https://github.com/ggml-org/whisper.cpp/releases/tag/v1.9.5'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/cve/CVE-2026-110810'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/1004714'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/420280'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/420280/cti'
    label: cna@vuldb.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-15T03:30:12.924Z'
vendor: ggml-org
product: whisper.cpp
affected:
  - whisper.cpp 1.9.0
  - whisper.cpp 1.9.1
  - whisper.cpp 1.9.2
  - whisper.cpp 1.9.3
  - whisper.cpp 1.9.4
---

## Overview

A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file src/whisper.cpp of the component Model Loader. Performing a manipulation of the argument ttype results in out-of-bounds read. The attack must be initiated from a local position. The exploit is now public and may be used. Upgrading to version 1.9.5 is able to mitigate this issue. The patch is named 60c0be6ac8fa71b1a2ae2dd938a31a34a508e774. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.