GitHub Repos· Oct 28, 2026· by s1ko

s1ko/whisper-cpp-ndims-oob-write

Open Original Article ↗
whisper.cpp: attacker-controlled tensor n_dims indexes a fixed ne[4] stack array while loading a model file (stack out-of-bounds write). Fixed in v1.9.3 prerelease and v1.9.4.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#cwe-121#cwe-787#fixed#ggml#model-file#security#vulnerability-research#whisper-cpp