xiph/speex

xiph/speex

Releases92

Frequency2 months 2 weeks

Last Releaseabout 4 years ago

Stars505

Speex voice codec mirror - THIS IS A MIRROR, DEVELOPMENT HAPPENS AT https://gitlab.xiph.org/xiph/speex

Log in to subscribe

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2020-23903NVD↗	= 1.2	Nov 10, 2021Wednesday, 10 November 2021, 22:15	5.5 MEDIUM	4.3 MEDIUM
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
CVE-2020-23904NVD↗	= 1.2	Nov 10, 2021Wednesday, 10 November 2021, 22:15	5.5 MEDIUM	4.3 MEDIUM
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.
CVE-2008-1686NVD↗	<= 1.1.12, = 1.0.2, = 1.0.3, = 1.0.4, = 1.0.5, = 1.1.1, = 1.1.2, = 1.1.3, = 1.1.4, = 1.1.5, = 1.1.6, = 1.1.7, = 1.1.8, = 1.1.9, = 1.1.10, = 1.1.11, = 1.1.11.1	Apr 8, 2008Tuesday, 8 April 2008, 18:05	—	9.3 HIGH
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.