The issue resides in the ggml_ftype_to_ggml_type function within Whisper.cpp’s ggml.c source. Manipulating the ftype argument can trigger a reachable assertion, causing the program to crash. This flaw permits a local user or process to force the application into an unclean termination, effectively denying service to the current user session. The weakness is an instance of improper input validation, identified as CWE‑617.

All deployments of Whisper.cpp that incorporate the vulnerable ggml_ftype_to_ggml_type implementation, specifically those built from commit 95ea8f9b of the ggml-org repository, are potentially affected. No explicit version boundaries are defined, so any build that includes this code is at risk.

The CVSS base score of 4.8 signifies moderate severity, while the EPSS score of <1% indicates a low probability of exploitation in the wild. The vulnerability is not listed in the CISA KEV catalog and requires a local attack vector, meaning an adversary must already have code execution or elevated privileges on the host to trigger the assertion. Consequently, the threat surface is limited to targeted or local users, and the impact is confined to service disruption rather than data compromise or remote code execution.