CVE detail
CVE-2026-17512
A vulnerability has been found in ggml-org whisper.cpp 1.8.4-58. This impacts the function log_mel_spectrogram of the file src/whisper.cpp. The manipulation leads to out-of-bounds read. The attack needs to be performed locally. The pull request to fix this issue awaits acceptance.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 7
- within the 30d window
- Peak daily
- 7
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://vuldb.com/vuln/383382/ctivuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 1:16 PM - https://vuldb.com/vuln/383382vuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 1:16 PM - https://vuldb.com/submit/798905vuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 1:16 PM - https://vuldb.com/cve/CVE-2026-17512vuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 1:16 PM No excerpt available.
Exploitgithub.comJul 27, 2026, 1:16 PMNo excerpt available.
Exploitgithub.comJul 27, 2026, 1:16 PM- https://github.com/ggml-org/whisper.cpp/github.com
No excerpt available.
Exploitgithub.comJul 27, 2026, 1:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16013CVSS 5.5 · Medium
A vulnerability has been found in liftoff-sr CIPster up to 632336d414ef708a542377c1aa8d6fdb7c70a760. Affected by this issue is the function CipAppPath::deserialize_symbolic of the…
- CVE-2026-15185CVSS 1.9 · Low
A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/media_tools/vobsub.c of the component MP4Box. Executing a manipulation…
- CVE-2026-14647CVSS 2.1 · Low
A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInference_opset19 of the file onnx/defs/nn/old.cc of the component onnxru…
- CVE-2026-13522CVSS 2.1 · Low
A security flaw has been discovered in Investintech SlimPDFReader up to 2.0.14. Affected by this issue is the function SlimPDFReader!Investintech::PCV::TeighaDo+0x25cde0 of the fi…
- CVE-2026-12314CVSS 7.5 · High
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
- CVE-2026-12310CVSS 7.5 · High
Memory safety bug fixed in Firefox 152. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.