Skip to content
OpenAdvisories
Low ALSA-2022:7979 1 CVE

Low: speex security update

Published Nov 15, 2022 · Updated Oct 29, 2026

Ecosystem: AlmaLinux

Summary

Speex is a patent-free compression format designed especially for speech. It is specialized for voice communications at low bit-rates.

Security Fix(es):

* speex: divide by zero in read_samples() via crafted WAV file (CVE-2020-23903)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Fixed packages 2

ReleasePackageFixed in
AlmaLinux · 9 speex 1.2.0-11.el9
AlmaLinux · 9 speex-devel 1.2.0-11.el9

Vulnerabilities 1

  • Unscored —
    CVE-2020-23903

    A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial…

    speex speex Debian Ubuntu

References

  • report
    https://access.redhat.com/security/cve/CVE-2020-23903
  • report
    https://bugzilla.redhat.com/2024250
  • advisory
    https://errata.almalinux.org/9/ALSA-2022-7979.html