Medium severity5.3NVD Advisory· Published Dec 12, 2023· Updated Jun 17, 2026
CVE-2023-49990
CVE-2023-49990
Description
Espeak-ng 1.52-dev was discovered to contain a buffer-overflow via the function SetUpPhonemeTable at synthdata.c.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7- Espeak-ng/Espeak-ngdescription
- osv-coords5 versionspkg:rpm/opensuse/espeak-ng&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/espeak-ng&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/espeak-ng&distro=openSUSE%20Tumbleweedpkg:rpm/suse/espeak-ng&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP5pkg:rpm/suse/espeak-ng&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Desktop%20Applications%2015%20SP6
< 1.50-150300.3.3.1+ 4 more
- (no CPE)range: < 1.50-150300.3.3.1
- (no CPE)range: < 1.50-150300.3.3.1
- (no CPE)range: < 1.51.1-1.1
- (no CPE)range: < 1.50-150300.3.3.1
- (no CPE)range: < 1.50-150300.3.3.1
Patches
Vulnerability mechanics
References
6- github.com/espeak-ng/espeak-ng/issues/1824nvdExploitIssue TrackingVendor Advisory
- lists.debian.org/debian-lts-announce/2025/05/msg00050.htmlnvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/nvd
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2PZEBWPNKPAYJMIM3AS2RP3FL6FX3HS4/nvd
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Z5WW6RKHRWLEMCKCQ6UZCXWC5J7UWMUQ/nvd
News mentions
0No linked articles in our index yet.