IBM Watson Speech Services Cartridge versions 4.0.0 through 5.4.0 contain a vulnerability that allows a remote attacker to perform an out-of-bounds read, potentially exposing sensitive information. The flaw is identified as CWE-125 and has a medium severity rating with a CVSS score of 5.3. No public exploits or known active exploitation have been reported. No patch or remediation information is currently available.