CyberRota Analysis
AI-GeneratedThe vulnerability in ggml-org whisper.cpp version 1.8.4-58 affects the log_mel_spectrogram function, allowing for an out-of-bounds read that could be exploited locally. While the severity is classified as low, organizations using this software should prioritize patching once the fix is accepted to mitigate potential risks associated with local exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.