Search CVE reports
1 – 4 of 4 results
Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex...
1 affected package
speex
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| speex | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation | Needs evaluation |
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.
1 affected package
speex
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| speex | — | — | Ignored | Ignored | Ignored |
Some fixes available 5 of 6
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
1 affected package
speex
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| speex | — | — | Fixed | Fixed | Fixed |
Some fixes available 32 of 47
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows...
8 affected packages
gst-plugins-good0.10, libfishsound, speex, sweep, vlc...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| gst-plugins-good0.10 | — | — | — | — | — |
| libfishsound | — | — | — | — | — |
| speex | — | — | — | — | — |
| sweep | — | — | — | — | — |
| vlc | — | — | — | — | — |
| vorbis-tools | — | — | — | — | — |
| xine-lib | — | — | — | — | — |
| xmms-speex | — | — | — | — | — |