Threats affecting pkg:maven/com.ibm/watson_speech_services_cartridge

CVE-2026-82418 is a critical use-after-free vulnerability in IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0. This flaw could allow a remote attacker to execute arbitrary code without any user interaction or privileges.

CVE-2026-17493 is an out-of-bounds read vulnerability in IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0. This flaw could be exploited remotely to cause a denial of service condition. The vulnerability does not impact confidentiality or integrity but results in service disruption.