Login Request a demo
SP
Product
speex
by xiph · last CVE Oct 26, 2026
4
CVEs
0
On KEV
6.5
Max CVSS
1
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 0Medium 3Low 0
Severity
All severities4Critical0High0Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add speex to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116741
New
6.5
0%
Oct 26
Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes
Affected: through 1.2.1
CVE-2020-23904
5.5
1%
Nov 10
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file
Affected: 1.2
CVE-2020-23903
5.5
1%
Nov 10
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file
Affected: 1.2
CVE-2008-1686
–
6%
Apr 8
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox,…
Affected: through 1.1.12; 1.0.2; 1.0.3; 1.0.4; 1.0.5; 1.1.1; +11 more
Showing 4