Linux Distros Unpatched Vulnerability : CVE-2026-54559

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary...

CVE-2026-54559

A flaw was found in PocketSphinx, a small speech recognizer. Inadequate validation of boundary conditions in language model loaders and unbounded string fields in acoustic model loaders can lead to stack or heap buffer overflows and memory corruption. An attacker with write access to a directory...

CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

UBUNTU-CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

CVE-2026-54559 PocketSphinx: Buffer overflows in language and acoustic model loading code

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

EUVD-2026-78066

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

CVE-2026-54559

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

goodbyecaptcha (>=2.3.0, <=2.4.2), memecomplete-desktop (0.2.0) +14 more potentially affected by CVE-2026-54559 via pocketsphinx (>=0.1.3, <=5.0.4)

pocketsphinx PYPI version =0.1.3, =2.3.0, =1.0.0, =0.0.0a1, =0.3.3a10, =0.0.2a2, =1.4.0, =2.1.0, =0.0.2a1, =0.1.3a1, =0.0.2, =0.1.20190807, =0.1.20191127 - sphinxwrapper 1.3.0 and more Source cves: CVE-2026-54559 Source advisory: MEND:CVE-2026-54559...

CVE-2026-54559 PocketSphinx: Buffer overflows in language and acoustic model loading code

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

CVE-2026-54559 PocketSphinx: Buffer overflows in language and acoustic model loading code

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

CVE-2026-54559

PocketSphinx (a lightweight speech recognizer, including its Python bindings) versions 5prealpha through 5.1.0 are affected by buffer overflow vulnerabilities in its model-loading code. The trie language-model loaders in src/lm/ngram_model_trie.c fail to validate boundary conditions in ARPA, DMP,...

CVE-2026-54559: Improper Restriction of Operations within the Bounds of a Memory Buffer

PocketSphinx is a small speech recognizer. Prior to 5.1.1, the trie language-model loaders in src/lm/ngrammodeltrie.c do not adequately validate boundary conditions in ARPA, DMP, and binary format headers, and the acoustic-model loaders in src/mdef.c and src/util/bio.c use sscanf with unbounded...

memegen-desktop (0.1.1) potentially affected by CVE-2026-54559 via pocketsphinx (0.1.3)

pocketsphinx PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pocketsphinx and may be impacted: - memegen-desktop 0.1.1 Source cves: CVE-2026-54559 Source advisory: OSV:PYSEC-2026-3498...

goodbyecaptcha (>=2.3.0, <=2.4.2), memecomplete-desktop (0.2.0) +12 more potentially affected by CVE-2026-54559 via pocketsphinx (0.1.15)

pocketsphinx PYPI version 0.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on pocketsphinx and may be impacted: - goodbyecaptcha =2.3.0, =0.0.0a1, =0.3.3a10, =0.0.2a2, =1.4.0, =2.1.0, =0.0.2a1, =0.1.3a1, =0.0.2, =0.1.20190807, =0.1.20191127 -...

multimodal-translation (>=1.0.0, <=1.0.1) potentially affected by CVE-2026-54559 via pocketsphinx (5.0.4)

pocketsphinx PYPI version 5.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on pocketsphinx and may be impacted: - multimodal-translation =1.0.0, =1.0.1 Source cves: CVE-2026-54559 Source advisory: OSV:PYSEC-2026-3498...

PYSEC-2026-3498 PocketSphinx: Buffer overflows in language and acoustic model loading code

Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...

Buffer Overflow

PocketSphinx is vulnerable to Buffer Overflow. The vulnerability is due to insufficient boundary checks while parsing language model headers and the use of unbounded sscanf string fields when loading acoustic models, which allows an attacker to supply malicious model files that trigger stack or...

Heap-based Buffer Overflow

Overview pocketsphinx is an Official Python bindings for PocketSphinx Affected versions of this package are vulnerable to Heap-based Buffer Overflow via the model loading process. An attacker can execute arbitrary code or cause a crash by supplying a crafted or malicious language or acoustic mode...

memegen-desktop (0.1.1) potentially affected by CVE-2026-54559 via pocketsphinx (0.1.3)

pocketsphinx PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pocketsphinx and may be impacted: - memegen-desktop 0.1.1 Source cves: CVE-2026-54559 Source advisory: OSV:GHSA-56R5-2P2F-7CXP...