Threats tagged 'ghsa-jmfj-jxhf-c4c3'

Speex (libspeex) versions through 1.2.1 have an out-of-bounds write vulnerability in the speex_bits_read_whole_bytes() function. This flaw occurs due to improper handling of length truncation for non-owned SpeexBits buffers, allowing attackers to stream crafted data that can corrupt heap or stack memory and cause application crashes.