Approved changes feed: RSS · Atom

cpe:2.3:a:xiph:speex:1.2:-:*:*:*:*:*:*

part: a version: 1.2 update: -

VendorXiph (732078b2-c4b9-5a7b-8ef7-5b937ffeb754)
ProductSpeex (500fda9e-5f3f-5b68-943a-8ab25f7cd3dd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/speex purl2cpe 2026-06-01 10:13:42.824298
pkg:deb/ubuntu/speex purl2cpe 2026-06-01 10:13:42.824299
pkg:github/xiph/speex purl2cpe 2026-06-01 10:13:42.824301
pkg:gitlab/redhat/speex purl2cpe 2026-06-01 10:13:42.824302
pkg:gnu/speex purl2cpe 2026-06-01 10:13:42.824304
pkg:rpm/centos/speex purl2cpe 2026-06-01 10:13:42.824305
pkg:rpm/fedora/speex purl2cpe 2026-06-01 10:13:42.824307
pkg:rpm/opensuse/speex purl2cpe 2026-06-01 10:13:42.824308

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-23904 vulnerable 2026-06-08 05:22:32.183495 Details available
A stack buffer overflow in speexenc.c of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file. NOTE: the vendor states "I cannot reproduce it" and it "is a demo program.
Published: 2021-11-10T21:26:13.000Z
Updated: 2024-08-04T15:05:11.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23903 vulnerable 2026-06-08 05:22:32.181491 Details available
A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial of service (DoS) via a crafted WAV file.
Published: 2021-11-10T21:26:12.000Z
Updated: 2024-08-04T15:05:11.286Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.