Mmastodon TechnologyCybersecurity first seen 11 d ago, last 11 d ago, peak #1

Low-severity vulnerability disclosed in ggml's whisper.cpp

Original: 🚨 EUVD-2026-101800 📊 Score: 2.4/10 (CVSS v3.1) 📦 Product: whisper.cpp, whisper.cpp, whisper.cpp (+2 more) 🏢 Vendor: ggml

A new vulnerability, EUVD-2026-101800, has been catalogued affecting ggml's whisper.cpp speech recognition tool versions up to 1.9.4. The flaw sits in the whisper_model_load function of the model loading code and carries a CVSS v3.1 score of 2.4 out of 10, making it low severity. The entry was updated on 15 October 2026, and no exploitation is reported so far.

Why now: Security trackers flagged a newly published vulnerability entry for the widely used whisper.cpp tool.

whisper.cppggmlEUVDCVSS

Open on mastodon →

Evidence

• 🚨 EUVD-2026-101800 📊 Score: 2.4/10 (CVSS v3.1) 📦 Product: whisper.cpp, whisper.cpp, whisper.cpp (+2 more) 🏢 Vendor: ggml-org 📅 Updated: 2026-10-15 📝 A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4. This affects the function whisper_model_load of the file… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/2297899