CVE-2026-123199

A flaw was found in ebook-speaker. An attacker can cause a Denial of Service DoS by convincing a user to open a specially crafted digital book file, such as an EPUB or DAISY document. Due to missing length validation when parsing an element's name attribute, the application experiences a stack...

CVE-2026-123199

The eBook-speaker software versions 6.1.0 through 6.2.0 contains a stack-based buffer overflow vulnerability within the get_attributes() function in src/common.c. The root cause is an unbounded strcpy operation performed on an element's name attribute. An attacker can trigger this by crafting an ...

CVE-2026-123199 eBook-speaker through 6.2.0 Stack-based Buffer Overflow via element name attribute

eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in getattributes in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a name attribute of 511 or more characters to corrupt the stack and crash...

EUVD-2026-117644

eBook-speaker 6.1.0 through 6.2.0 contains a stack buffer overflow vulnerability in getattributes in src/common.c caused by an unbounded strcpy of an element's name attribute. Attackers can craft an EPUB or DAISY book with a name attribute of 511 or more characters to corrupt the stack and crash...