CVE-2026-123199

The eBook-speaker software versions 6.1.0 through 6.2.0 contains a stack-based buffer overflow vulnerability within the get_attributes() function in src/common.c. The root cause is an unbounded strcpy operation performed on an element's name attribute. An attacker can trigger this by crafting an ...

EUVD-2026-117644

eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in getattributes in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a name attribute of 511 or more characters to corrupt the stack and crash...