Vulnerabilities

TI-2023-27350 CVE-2023-49994 · GHSA-2gxf-v2x6-xmcm

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

LOW 25

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00376 Published 2023-12-12 Fix deferred CWE-697

TI-2023-27349 CVE-2023-49993 · GHSA-qh3r-8rvv-95xp

LOW 24

Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00405 Published 2023-12-12 Will not fix CWE-120

TI-2023-27348 CVE-2023-49992 · GHSA-2g42-jgwr-h29g

LOW 24

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00405 Published 2023-12-12 Will not fix CWE-787

TI-2023-27347 CVE-2023-49991 · GHSA-vc5p-mv7h-v2mx

LOW 24

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00372 Published 2023-12-12 Will not fix CWE-787

TI-2023-27346 CVE-2023-49990 · GHSA-x7cw-5x7j-jx35

MEDIUM 57

Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c.

CVSS 3.1MEDIUM 5.3 Local No auth User interaction EPSS 0.00396 Published 2023-12-12 Will not fix CWE-120