CVE-2023-49994

MEDIUM

Espeak-ng <1.52-dev - Memory Corruption

Title source: llm

Description

Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c.

References (6)

[Mailing List] https://lists.debian.org/debian-lts-announce/2025/05/msg00050.html

[Exploit, Issue Tracking, Vendor Advisory] https://github.com/espeak-ng/espeak-ng/issues/1823

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/

Scores

CVSS v3 5.5

EPSS 0.0003

EPSS Percentile 8.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

CWE

CWE-697

Status published

Products (1)

espeak-ng/espeak-ng 1.52 dev

Published Dec 12, 2023

Tracked Since Feb 18, 2026