goodbyecaptcha (>=2.3.0, <=2.4.2), memecomplete-desktop (0.2.0) +14 more potentially affected by CVE-2026-54559 via pocketsphinx (>=0.1.3, <=5.0.4)

pocketsphinx PYPI version =0.1.3, =2.3.0, =1.0.0, =0.0.0a1, =0.3.3a10, =0.0.2a2, =1.4.0, =2.1.0, =0.0.2a1, =0.1.3a1, =0.0.2, =0.1.20190807, =0.1.20191127 - sphinxwrapper 1.3.0 and more Source cves: CVE-2026-54559 Source advisory: MEND:CVE-2026-54559...

multimodal-translation (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-54559 via pocketsphinx (5.0.4)

pocketsphinx PYPI version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on pocketsphinx and may be impacted: - multimodal-translation =1.0.0, =1.0.1 Source cves: CVE-2026-54559 Source advisory: OSV:PYSEC-2026-3498...

SUSE CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...