DEBIAN-CVE-2026-116741: Medium severity debian/speex vulnerability

Published Oct 26, 2026

Updated

Speex (libspeex) through 1.2.1 contains an out-of-bounds write vulnerability in speexbitsreadwholebytes() in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speexbitsinitbuffer() or speexbitssetbitbuffer() to corrupt heap or stack memory and crash applications.

Affected Software

3 affected components

debian/speex*

Event History

Oct 26, 2026

CVE Published

via OSV·10:16 PM

Data Sourced

via OSV·10:16 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which applications are exposed to this issue?

Applications using libspeex are exposed when they stream attacker-controlled Speex data into non-owned SpeexBits buffers initialized with speex_bits_init_buffer() or speex_bits_set_bit_buffer(). The issue can corrupt heap or stack memory and crash the application.

Does exploiting this require authentication or user interaction?

No authentication or user interaction is required according to the supplied vector. Exploitation requires an attacker to provide crafted Speex data and depends on the high attack complexity indicated by the vector.

What is the impact of a successful exploit?

The reported impacts are application crashes through heap or stack memory corruption and limited integrity impact. No confidentiality impact is listed.

DEBIAN-CVE-2026-116741: Medium severity debian/speex vulnerability

Affected Software

Event History

Frequently Asked Questions

Which applications are exposed to this issue?

Does exploiting this require authentication or user interaction?

What is the impact of a successful exploit?

Company

Resources

Contact

Frequently Asked Questions

Which applications are exposed to this issue?

Does exploiting this require authentication or user interaction?

What is the impact of a successful exploit?