PT-2026-64106

Impact The trie language model code introduced in PocketSphinx 5prealpha failed to check various boundary conditions when reading the headers of ARPA, DMP, and binary format language model files. In the case of invalid, corrupted or malicious input files, this could lead to stack and heap buffer...

Buffer Overflow

PocketSphinx is vulnerable to Buffer Overflow. The vulnerability is due to insufficient boundary checks while parsing language model headers and the use of unbounded sscanf string fields when loading acoustic models, which allows an attacker to supply malicious model files that trigger stack or...

PT-2026-60899

Name of the Vulnerable Software and Affected Versions PocketSphinx versions 5prealpha through 5.1.0 Description The trie language model code fails to check boundary conditions when reading headers of ARPA, DMP, and binary format language model files, which can lead to stack and heap buffer...