CVE-2026-57197

A flaw was found in Asterisk. A heap buffer overflow in the formatoggspeex module allows an attacker to cause a Denial of Service DoS or potentially achieve arbitrary code execution. This issue occurs when Asterisk reads a corrupted Speex audio file, triggering an unbounded memory copy operation...

openSUSE 16: libvlc5 / libvlccore9 / vlc / vlc-codec-fluidsynth / etc (openSUSE-SU-2026:22198-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:22198-1 advisory. Changes in vlc: - Add conditional for pkgconfigvpl BuildRequires and plugin, exclude %arm ppc64le %ppc s390x. - Add conditional for pkgconfiglibnfs...

CVE-2026-116741

Speex libspeex through 1.2.1 contains an out-of-bounds write vulnerability in speexbitsreadwholebytes in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speexbitsinitbuffer or speexbitssetbitbuffer...

OPENSUSE-SU-2026:22198-1 Security update for vlc

This update for vlc fixes the following issues: Changes in vlc: - Add conditional for pkgconfigvpl BuildRequires and plugin, exclude %arm ppc64le %ppc s390x. - Add conditional for pkgconfiglibnfs BuildRequires and plugin, exclude %arm - Switch to qt6: Drop libQt5Gui-private-headers-devel,...

Linux Distros Unpatched Vulnerability : CVE-2026-57197

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11...

SUSE CVE-2026-116741

Speex libspeex through 1.2.1 contains an out-of-bounds write vulnerability in speexbitsreadwholebytes in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speexbitsinitbuffer or speexbitssetbitbuffer...

DEBIAN-CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

UBUNTU-CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-57197 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-57197

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded "memcpy" of "OGG/Speex" packet data in "formatoggspeex" can cause a heap buffer overflow and crash Asterisk wh...

CVE-2026-57197 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-57197 Asterisk: Heap Buffer Overflow in OGG/Speex File Playback (format_ogg_speex)

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-57197

Asterisk, an open source telephony toolkit, contains a heap buffer overflow vulnerability in the format_ogg_speex component. The root cause is an unbounded memcpy of OGG/Speex packet data when the software processes a file containing corrupted Speex audio. If triggered, this vulnerability can cau...

EUVD-2026-111110

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in formatoggspeex can cause a heap buffer overflow and crash Asterisk when...

CVE-2026-116741

A flaw was found in speex. An out-of-bounds write vulnerability exists due to improper buffer length handling when decoding byte streams into external memory buffers. A remote attacker could exploit this flaw by streaming specially crafted audio data into an affected application, triggering memor...

EUVD-2026-110489

Speex libspeex through 1.2.1 contains an out-of-bounds write vulnerability in speexbitsreadwholebytes in libspeex/bits.c that mishandles length truncation for non-owned SpeexBits buffers. Attackers can stream crafted Speex data into buffers set up with speexbitsinitbuffer or speexbitssetbitbuffer...

Asterisk buffer error vulnerability

Versions prior to Asterisk 20.20.1, 21.12.3, 22.10.1, and 23.4.1, as well as Certified Asterisk versions prior to 20.7-cert11 and 22.8-cert3 are affected by a buffer error vulnerability. This vulnerability stems from an unbounded memcpy within formatoggspeex when processing OGG/Speex packets,...

PT-2026-126694

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an unbounded memcpy of OGG/Speex packet data in format ogg speex can cause a heap buffer overflow and crash Asterisk when...