Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-07-27T12:45:10 whisper.cpp: whisper.cpp: Denial of Service via ftype argument manipulation 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CWE-617

A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.

A flaw was found in whisper.cpp, a library for machine learning. A local attacker can exploit a vulnerability in the ggml_ftype_to_ggml_type function by manipulating the ftype argument. This manipulation leads to a reachable assertion, which can cause the application to terminate, resulting in a Denial of Service (DoS).

Red Hat Product Security has determined that this vulnerability does not affect any currently supported Red Hat product. This assessment may evolve based on further analysis and discovery. For more information about this vulnerability and the affected packages, refer to the linked references. https://www.cve.org/CVERecord?id=CVE-2026-17513 https://nvd.nist.gov/vuln/detail/CVE-2026-17513 https://github.com/ggml-org/whisper.cpp/ https://github.com/ggml-org/whisper.cpp/issues/3924 https://vuldb.com/cve/CVE-2026-17513 https://vuldb.com/submit/799055 https://vuldb.com/vuln/383383 https://vuldb.com/vuln/383383/cti