espeak-ng:ssml-fuzzer: Stack-buffer-overflow in TranslateNumber_1

Project: https://github.com/espeak-ng/espeak-ng.git Detailed Report: https://oss-fuzz.com/testcase?key=4849410845573120 Project: espeak-ng Fuzzing Engine: libFuzzer Fuzz Target: ssml-fuzzer Job Type: libfuzzerasanespeak-ng Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address:...

CVE-2017-13285

In SvoxSsmlParser and startElement of svoxssmlparser.cpp, there is a possible out of bounds write due to an uninitialized buffer. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation...

Google Android System Remote Code Execution Vulnerability (CNVD-2018-07446)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. A remote code execution vulnerability exists in the SvoxSsmlParser and startElement of the svoxssmlparser.cpp file in Android. A remote attacker can exploit this vulnerability to...

PT-2017-3642

Name of the Vulnerable Software and Affected Versions: Android versions 6.0 through 8.1 Description: The issue is related to the SvoxSsmlParser and startElement functions in the svox ssml parser.cpp file, where there is a possible out of bounds write due to an uninitialized buffer. This could lea...