A global buffer overflow vulnerability exists in the AnnouncePunctuation function of espeak-ng versions 1.51 and 1.52.0. This issue was identified by OSS-Fuzz and involves a write out-of-bounds error. The flaw has been fixed in a later commit. No public exploit or active exploitation is currently known.