AZL-111115
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-111115.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-111115
- Upstream
- Published
- 2026-10-26T22:16:58Z
- Modified
- 2026-10-27T14:16:06Z
- Summary
- CVE-2026-116741 affecting package speex 1.2.0-6
- Details
-
Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speex_bits_read_whole_bytes() in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speex_bits_init_buffer() or speex_bits_set_bit_buffer() to corrupt heap or stack memory and crash applications.
- References