The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade libfishsoundUpgrade speex | Jul 30, 2024 | Apr 8, 2008 |
| Freebsd | — | Upgrade libxineUpgrade vorbis-tools | Dec 10, 2025 | May 11, 2008 |
| Gentoo Linux | — | Upgrade media-libs/speex. | Oct 30, 2017 | Apr 8, 2008 |
| Oracle_linux | — | Upgrade speex-develUpgrade speex | Oct 16, 2024 | Apr 8, 2008 |
| Suse | — | Upgrade libxine1Upgrade libxine1-32bitUpgrade vorbis-tools-langUpgrade gstreamer-plugins-good-jackUpgrade gstreamer-0_10-plugins-good-langUpgrade gstreamer-plugins-good-langUpgrade libxine1-gnome-vfsUpgrade libxine1-pulseUpgrade gstreamer-0_10-plugins-good-docUpgrade gstreamer-plugins-good-extraUpgrade vorbis-toolsUpgrade gstreamer-plugins-goodUpgrade gstreamer-0_10-plugins-goodUpgrade gstreamer-plugins-good-gtkUpgrade libxine-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libxine1Upgrade gstreamer0.10-plugins-goodUpgrade vorbis-toolsUpgrade libxine-main1Upgrade libspeex1 | Nov 8, 2024 | Apr 8, 2008 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub