CVE-2026-116741

A flaw was found in speex. An out-of-bounds write vulnerability exists due to improper buffer length handling when decoding byte streams into external memory buffers. A remote attacker could exploit this flaw by streaming specially crafted audio data into an affected application, triggering memory corruption. This issue primarily leads to application crashes, resulting in a Denial of Service (DoS).

Red Hat Product Security rates this vulnerability as Moderate severity because successful exploitation depends on specific buffer initialization patterns in consuming applications and typically results in process crashes rather than arbitrary code execution. Although the library is widely distributed across Red Hat Enterprise Linux to support multimedia software, direct exposure requires an application to parse untrusted audio streams. Consequently, the primary impact is confined to a denial of service affecting only the application actively processing the malformed data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.