CVE-2026-110810

Name of the Vulnerable Software and Affected Versions ggml-org whisper.cpp versions prior to 1.9.5

Description An issue exists in the Model Loader component within the whisper model load() function of the src/whisper.cpp file. A local attacker can trigger an out-of-bounds read by manipulating the ttype argument. An out-of-bounds read occurs when the software reads data past the end of the intended buffer, potentially exposing sensitive information from memory.

Recommendations Upgrade to version 1.9.5.