Downloads · 30 days
0
ggml-whisper-n-dims-oob-poc
AgentRen/ggml-whisper-n-dims-oob-poc
ggml-whisper-n-dims-oob-poc is a machine learning model from AgentRen. Use it for the machine learning task on the model card, and read the license before you ship it in a product. The card lists the license as mit.
This repo contains a tiny crafted legacy GGML-container model file (malicious.ggml.bin) designed to reach the weights parsing loop in whisper.cpp v1.4.2 and trigger a stack out-of-bounds write by setting ndims = 5.
Access
Public
Updated Feb 2, 2026
Repo size
—
Likes
0
Public
Repo makeup
Click a slice to open those files.
Other1.5 KB · 64%
At a glance
- License
- mit
- Access
- Public
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026
- SHA
- 75fa2e02
Model card
From the Hugging Face model README
GGML PoC: whisper.cpp stack OOB write via unbounded n_dims
This repo contains a tiny crafted legacy GGML-container model file (malicious.ggml.bin) designed to reach the weights parsing loop in whisper.cpp v1.4.2 and trigger a stack out-of-bounds write by setting n_dims = 5.
Relevant code (whisper.cpp v1.4.2):
whisper_model_load()weights loop usesint32_t ne[4]but writesne[i]fori < n_dims.
Proof-of-concept file:
malicious.ggml.bin(92 bytes)
Expected behavior:
- On ASAN / hardened builds: immediate crash / stack-buffer-overflow report during model load.
Reference:
- https://github.com/ggml-org/whisper.cpp/blob/v1.4.2/whisper.cpp (search for
int32_t ne[4]in the weights loop)
- License
- mit
- Created
- Feb 2, 2026
- Updated
- Feb 2, 2026