CVE-2025-14569

A vulnerability was detected in ggml-org whisper.cpp up to 1.8.2. Affected is the function read_audio_data of the file /whisper.cpp/examples/common-whisper.cpp. The manipulation results in use after free. The attack requires a local approach. The exploit is now public and may be used. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-119
• CWE-416

• https://github.com/ggml-org/whisper.cpp/issues/3501
• https://github.com/oneafter/InvalidFree/blob/main/repro
• https://vuldb.com/?ctiid.336193
• https://vuldb.com/?id.336193
• https://vuldb.com/?submit.703886

Published

Dec 12, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14561In multi-tenant deployments, the Publisher REST APIs fail to…9
• CVE-2025-14562GitLab has remediated an issue in GitLab CE/EE affecting all…3.1
• CVE-2025-14565A vulnerability was identified in kidaze CourseSelectionSyst…9.8
• CVE-2025-14566A security flaw has been discovered in kidaze CourseSelectio…9.8
• CVE-2025-14567A weakness has been identified in haxxorsid Stock-Management…7.5
• CVE-2025-14568A security vulnerability has been detected in haxxorsid Stoc…6.3
• CVE-2025-1457The Element Pack Addons for Elementor – Free Templates and W…6.4
• CVE-2025-14570A flaw has been found in projectworlds Advanced Library Mana…9.8
• CVE-2025-14571A vulnerability has been found in projectworlds Advanced Lib…9.8
• CVE-2025-14572A vulnerability was found in UTT 进取 512W up to 1.7.7-171114.…8.8
• CVE-2025-14573Mattermost versions 10.11.x <= 10.11.9 fail to enforce invit…2.7
• CVE-2025-14574The weDocs plugin for WordPress is vulnerable to Sensitive I…5.3