Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

...

Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c.

...

Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow

...

Linux Distros Unpatched Vulnerability : CVE-2023-49991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c. CVE-2023-49991 Note that Nessus relies...

Linux Distros Unpatched Vulnerability : CVE-2023-49993

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a Buffer Overflow via the function ReadClause at readclause.c. CVE-2023-49993 Note that Nessus relies on the presen...

Linux Distros Unpatched Vulnerability : CVE-2023-49992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Overflow via the function RemoveEnding at dictionary.c. CVE-2023-49992 Note that Nessus relies on th...

Linux Distros Unpatched Vulnerability : CVE-2023-49990

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c. CVE-2023-49990 Note that Nessus relies on the...

The vulnerability of the RemoveEnding() function in the Espeak speech synthesiser allows a hacker to trigger a service failure.

The vulnerability of the RemoveEnding function in the Espeak speech synthesizer is related to stack buffer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the SetUpPhonemeTable() function in the Espeak speech synthesiser allows a hacker to trigger a service failure.

The vulnerability of the SetUpPhonemeTable function in the Espeak speech synthesiser is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to cause a system failure...

The vulnerability of the PeaksToHarmspect() function in the Espeak speech synthesiser allows a violator to trigger a service failure.

The vulnerability of the PeaksToHarmspect function in the Espeak speech synthesiser is related to errors in comparison operations. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the ReadClause() function in the Espeak speech synthesiser allows a perpetrator to trigger a service failure.

The vulnerability of the ReadClause function in the Espeak speech synthesiser lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the CountVowelPosition() function in the Espeak speech synthesiser allows a hacker to trigger a service failure.

The vulnerability of the CountVowelPosition function in the Espeak speech synthesiser is related to stack buffer overflow. Exploiting this vulnerability could allow an attacker to cause a system failure...

ROS-20240807-02

Vulnerability of CountVowelPosition function of Espeak compact free software speech synthesizer is related to stack buffer overflow. with a stack buffer overflow. Exploitation of the vulnerability could allow an attacker to cause a denial of service SetUpPhonemeTable compact free software speech...

OPENSUSE-SU-2024:14230-1 espeak-ng-1.51.1-1.1 on GA media

These are all security issues fixed in the espeak-ng-1.51.1-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE SLED15: espeak-ng / espeak-ng-compat / espeak-ng-compat-devel / etc (SUSE-SU-2024:2632-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:2632-1 advisory. - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c bsc1218010 ...

SUSE-SU-2024:2632-1 Security update for espeak-ng

This update for espeak-ng fixes the following issues: - CVE-2023-49990: Fixed buffer overflow in SetUpPhonemeTable function at synthdata.c bsc1218010 - CVE-2023-49991: Fixed stack-buffer-underflow exists in the function CountVowelPosition in synthdata.c bsc1218006 - CVE-2023-49992: Fixed...

Mageia: Security Advisory (MGASA-2024-0249)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated espeak-ng packages fix security vulnerabilities

It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...

MGASA-2024-0249 Updated espeak-ng packages fix security vulnerabilities

It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code...

USN-6858-1 espeak-ng vulnerabilities

It was discovered that eSpeak NG did not properly manage memory under certain circumstances. An attacker could possibly use this issue to cause a denial of service, or execute arbitrary code. CVE-2023-49990, CVE-2023-49991, CVE-2023-49992, CVE-2023-49993, CVE-2023-49994...