Downloads · 30 days
0
poc-whisper-stack-overflow-ndims
Rammadaeus/poc-whisper-stack-overflow-ndims
poc-whisper-stack-overflow-ndims is a machine learning model from Rammadaeus. Use it for the machine learning task on the model card, and read the license before you ship it in a product.
Format: GGML (.bin) Target: whisper.cpp (ggml-org/whisper.cpp) CWE: CWE-121 (Stack-based Buffer Overflow)
Access
Public
Updated Feb 18, 2026
Repo size
676 KB
Likes
0
Public
Repo makeup
Click a slice to open those files.
.bin676 KB · 99%
At a glance
- Access
- Public
- Created
- Feb 18, 2026
- Updated
- Feb 18, 2026
- SHA
- df8394ca
Model card
From the Hugging Face model README
PoC: Stack Buffer Overflow in whisper.cpp GGML Parser
Format: GGML (.bin) Target: whisper.cpp (ggml-org/whisper.cpp) CWE: CWE-121 (Stack-based Buffer Overflow)
Vulnerability
Stack buffer overflow via unchecked n_dims in tensor loading. n_dims > 4 causes writes past the ne[4] stack array with attacker-controlled values. Potential RCE.
Reproduction
git clone https://github.com/ggml-org/whisper.cpp && cd whisper.cpp
mkdir build-asan && cd build-asan
cmake .. -DCMAKE_C_FLAGS="-fsanitize=address,undefined -fno-omit-frame-pointer -g" \
-DCMAKE_CXX_FLAGS="-fsanitize=address,undefined -fno-omit-frame-pointer -g" \
-DCMAKE_EXE_LINKER_FLAGS="-fsanitize=address,undefined"
make -j$(nproc)
./bin/whisper-cli -m ../poc_stack_overflow.bin -f /dev/null
ASAN reports: stack-buffer-overflow WRITE at whisper.cpp:1885
Tested: whisper.cpp commit 364c77f4
- Created
- Feb 18, 2026
- Updated
- Feb 18, 2026