CVE-2026-17512 - CERT CVE
ID CVE-2026-17512
Sažetak A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.
Reference
CVSS
Base: 1.7
Impact: 2.9
Exploitability:3.1
Pristup
VektorSloženostAutentikacija
LOCAL LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:L/AC:L/Au:S/C:P/I:N/A:N
Zadnje važnije ažuriranje 27-07-2026 - 20:25
Objavljeno 27-07-2026 - 13:16