Espeak ng: Global-buffer-overflow
Affects espeak-ngSource GCVE Database
Rated High by Threat Radar's AI analysis
- Patch
- Available – fixed in 688cb60368d6e0998f3632af8d1c3c2ad4191fc2
Data as of 9 Nov 2026, 16:03 UTC
What to do
Upgrade espeak-ng to 688cb60368d6e0998f3632af8d1c3c2ad4191fc2.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
OSS-Fuzzespeak-ngpkg:generic/espeak-ngOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and has been applied in the commit 688cb60368d6e0998f3632af8d1c3c2ad4191fc2. Users of espeak-ng versions 1.51 and 1.52.0 should upgrade to a fixed version containing this commit to remediate the vulnerability.
Description
A global buffer overflow vulnerability exists in the AnnouncePunctuation function of espeak-ng versions 1.51 and 1.52.0. This issue was identified by OSS-Fuzz and involves a write out-of-bounds error. The flaw has been fixed in a later commit. No public exploit or active exploitation is currently known.