CVE detail
CVE-2026-17513
A vulnerability was found in ggml-org whisper.cpp 95ea8f9b. Affected is the function ggml_ftype_to_ggml_type of the file ggml/src/ggml.c. The manipulation of the argument ftype results in reachable assertion. The attack requires a local approach. The project was informed of the problem early through an issue report but has not responded yet.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 6
- within the 30d window
- Peak daily
- 6
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://vuldb.com/vuln/383383/ctivuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 2:16 PM - https://vuldb.com/vuln/383383vuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 2:16 PM - https://vuldb.com/submit/799055vuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 2:16 PM - https://vuldb.com/cve/CVE-2026-17513vuldb.com
No excerpt available.
Exploitvuldb.comJul 27, 2026, 2:16 PM No excerpt available.
Exploitgithub.comJul 27, 2026, 2:16 PM- https://github.com/ggml-org/whisper.cpp/github.com
No excerpt available.
Exploitgithub.comJul 27, 2026, 2:16 PM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-17574CVSS 5.2 · Medium
HDF5 contains a NULL pointer dereference vulnerability. Processing a crafted HDF5 file containing an attribute with an invalid variable-length datatype type field may cause the ap…
- CVE-2026-45815CVSS 7.5 · High
Reachable Assertion vulnerability in Apache NimBLE. A specially crafted ATT Read Multiple Variable Response (BLE_ATT_OP_READ_MULT_VAR_RSP) may trigger assert in ATT parser. Sever…
- CVE-2026-9737CVSS 7.1 · High
During query planning when reading the sort pattern in raw BSONObj form, in some places we don’t explicitly handle the meta expression case. This may lead to incorrect transformat…
- CVE-2026-13073CVSS 5.3 · Medium
An authenticated user with read-only privileges can cause the mongod process to terminate abnormally by issuing a crafted aggregation command, resulting in denial of service for a…
- CVE-2026-13058CVSS 7.1 · High
An authenticated user with basic write privileges can cause the mongod process to terminate abnormally by sending a crafted transaction command with an incomplete set of required…
- CVE-2026-13055CVSS 7.1 · High
The `$_internalIndexKey` aggregation expression can be used by any authenticated user to crash a MongoDB server (mongod). The expression fails to handle compound wildcard index sp…