Vulnerabilities

TI-2020-14722 CVE-2020-23904 · GHSA-3p3f-h63v-47c5

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of…

LOW 26

A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00719 Published 2021-11-10 Will not fix CWE-787

TI-2020-14721 CVE-2020-23903 · GHSA-r85g-7qgq-6wrq

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2…

LOW 27

A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01011 Published 2021-11-10 Partial fix CWE-369

TI-2008-01616 CVE-2008-1686 · GHSA-8q5j-pq4c-9v79

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and…

MEDIUM 49

Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.06494 Published 2008-04-08 Fixed CWE-189