Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-116741 · Microsoft / collected KEV context

cve-program · CVE-2026-116741

• https://github.com/xiph/speex/issues/42
• https://github.com/xiph/speex
• https://github.com/xiph/speex/blob/Speex-1.2.1/libspeex/bits.c#L177
• https://hackmd.io/@haindpwn/speex-bits-read-whole-bytes-oob-write
• https://gitlab.xiph.org/xiph/speex/-/merge_requests/32
• https://www.vulncheck.com/advisories/speex-through-1.2.1-out-of-bounds-write-via-speex-bits-read-whole-bytes

• Speex through 1.2.1 Out-of-Bounds Write via speex_bits_read_whole_bytes · Newly collected advisory · 26 Oct 2026