Skip to content
OpenAdvisories
Unscored USN-5280-1 1 CVE

speex vulnerability

Published Feb 10, 2022 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Speex incorrectly handled certain WAV files.
An attacker could possibly use this issue to cause a denial of service.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 18.04 LTS 18.04:LTS speex 1.2~rc1.2-1ubuntu2.1
Ubuntu · 20.04 LTS 20.04:LTS speex 1.2~rc1.2-1.1ubuntu1.20.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS speex 1.2~rc1.2-1ubuntu1+esm1

Vulnerabilities 1

  • Unscored —
    CVE-2020-23903

    A Divide by Zero vulnerability in the function static int read_samples of Speex v1.2 allows attackers to cause a denial…

    speex speex Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2020-23903